Passkey saving gets interfered with Windows Hello

Hi LotharSchaberg​,

I may add some informal, additional information to your case. As you already discovered, "we" create passkeys to a domain that differs from the origin, as the passkey should work for all brands, like huk24.de and others.

Having an origin that differs from the relying party is a rather new, Webauthn Level 3 feature (hits CR soon) that is currently supported by Chromium-based browsers and Safari (and on Apple devices in general). The issue is, that 1Password does not support (yet) "Related Origin Requests"; as a personal user of 1Password, I (and others) already raised this concern, e.g. here: https://www.1password.community/discussions/1password/webauthn-support-of-related-origin-requests/42002

On Edge, 1Passwords fails due to its missing support of ROR, falling back to Windows Hello. On your iPad, 1Password seems to rely on a system implementation that supports ROR (or: 1Password does support ROR on iOS?) and creates the Passkey.

Currently I would recommend two things:

a) Create a second Passkey that is stored in Windows Hello, to actually use the feature (if you like)
b) Raise your voice, that 1Password supports ROR ;)

Cheers,
Daniel