It’s Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
chillhoof
2 years agoNew Contributor
Passkey and OTP autofill
Hi all,
when using Passkeys I am encountering a select few websites (PayPal, Amazon) that require an OTP on top of the Passkey. While I guess this is not how it should be implemented it is unfortu...
- 3 months ago
Thank you for the follow-up! Our developers have looked into the issue and have found that iOS doesn't allow us to access the clipboard when a passkey is suggested by AutoFill. This means that 1Password for iOS can't automatically copy a one-time password to the clipboard unless 1Password's own window is open.
That being said, iOS 18 should provide third-party password managers to fill the TOTP directly but it looks like a bug was introduced in recent versions of iOS 18 that prevents third-party password managers from doing so. The team is looking into filing feedback with Apple.
For the time being, the two best workarounds are:
- If you're using Safari, then use 1Password for Safari to fill the one-time password on Amazon's website after you sign in using your passkeys: Fill one-time passwords
- Double-tap on the one-time password field on Amazon's webpage and then tap AutoFill > Passwords. Search for the correct login item and then tap on the three dots next to the one-time password and tap AutoFill.
On macOS at least, 1Password steamrolls past the passkey prompt and just enters a password anyway on Amazon. I'd rather use passkeys, but auth being low friction matters more.
You can turn off auto-submit for Amazon to avoid having 1Password fill your password and then submit your login credentials. Click on the 1Password icon in your browser's toolbar, click on the item for Amazon, then click on the three dots in the upper right corner and select Don't sign in automatically.
Let me know if you have any questions.-Dave
#31494
#37860
chillhoof
2 years agoNew Contributor
Hi 1P_Dave ,
thank you for your qick reply.
Your suggested settings work perfectly fine when using regular username/password + OTP.
Unfortunately they do not work when using Passkey + OTP instead.
This can be reproduced for both iOS and Windows (Firefox).
When you input the Passkey the OTP is neither filled automatically nor copied to clipboard.