Forum Discussion

michaelyork's avatar
michaelyork
Frequent Contributor
2 years ago

Passkeys now require interactive click instead of automatically "filling"

In extension versions prior to 2.14.2, users did not have to do anything other than initiate a sign in by passkey for 1Password to "autofill" it, assuming the extension itself was unlocked. In 2.14.2...
browser extension
1P_Dave's avatar
1P_Dave
Icon for Moderator rankModerator
2 years ago

Hello michaelyork, loggor, and ianto! 👋

Thank you for the feedback. Signing in with a passkey requires that you first confirm the sign in for two big reasons:

  1. As rctneil mentioned, it allows you to choose which passkey to use in a situation where you might have multiple accounts for the same website.
  2. Without user confirmation it would be possible for a website to trigger an automatic login without your consent. This can pose privacy and security implications for websites that you might want to temporarily browse anonymously without logging in right away.

I hope that helps. 🙂

-Dave

ref: 35434495
ref: 35434545