Passkeys-like Support?

Hi cobaltjacket:

Passkeys, the standard-based technology guided by the FIDO Alliance, are based on the same underlying technology that is used for physical security keys that you plug in to your phone or computer, but they are entirely software-based. Hardware security components still come into play in this process as the Secure Enclave on Apple devices and TPM on Windows are used to authenticate and verify users as they unlock 1Password, which is something that we use today in all our 1Password apps when available.

The security issues around passwords has little to do with how they are stored in password managers, and instead how they can be found in data breaches and used across the web to access your accounts. Passkeys helps eliminate this problem since it consists of a lengthy private key that’s created on your device and never exposed to the outside world. When you sign in using a passkey, the website you’re visiting can’t access your private key. It can only verify that you possess it, and that it corresponds to a matching public key. This makes passkeys highly resistant to phishing and theft.

1Password Teams and 1Password Business users already have the ability to enforce two-factor authentication on their users accounts, as well as being able to enforce an authentication method (such as security keys or Duo) that works best for their organization. And as is the case already with 1Password accounts, the Secret Key keeps your 1Password account safe by adding another level of security on top of your 1Password account password and is required to sign in to your account on a new device or browser.

However, I'll be sure to share your feedback regarding this with the team as they work towards launching full passkeys support in 1Password in early 2023.

-Jac