Signing back into the Community for the first time? You'll need to reset your password to access your account. Find out more.
Forum Discussion
Former Member
2 years agoPasskey questions
I am trying to understand passkeys. I do understand I will need to set up a biometric (face, fingerprint, or window hello). Will this need to be done on each device that I use, or will 1password tran...
baggend
2 years agoOccasional Contributor
Tangible409 Biometric passkeys aren't actually tied to any biometric data, they're just using your biometric data to keep the randomly generated passkey stored on your device. All passkeys are just a public key and private key pair made up for each specific site. The site you're logging into gets the public key because that doesn't need to be secure, and the private key that 1Password or some other vault (Mac OS/iOS Secure Enclave, Windows Hello, etc) stores for you. When you "log in" with biometrics, you're just unlocking the vault that the randomly generated private key is in so that it can be used to authenticate you.
So when you share a key with someone, your biometrics unlock the vault, the randomly generated key gets copied and shared with a friend, and then your vault locks again.
Note: I don't work for 1Password, I just work with web authentication