Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
mike48397289
2 years agoFrequent Contributor
Suggestion for Passkey only access on new device, no existing device access needed
After using the new beta access, I like it but I am concerend that the recovery key not needs storage just like the secret key. It also then needs to be sent to the email address which creates a phis...
mike48397289
2 years agoFrequent Contributor
Thank you 1P_Dave for your reply. Maybe my somewhat long initial message missed the important starting point
It should be possible to login from scratch using a passkey on a yubikey etc with no other device required. The current implementation doesn't permit this. Worse still it requires access to your email which ideally will have that password/OTP/passkey stored in 1password, but you won't have access to that. It's very circular and will result on people getting locked out unnecessarily.
The user needs to carry a copy of the recovery code and email credentials outside of the password manager. This is hard to do securely which is why we use password managers
I'm very disappointed with this implementation because it somewhat undermines the whole point of a password manager.