Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
Solved
Unable to create and save a passkey in Costco android app
I am getting the error message when trying to create a passkey in the Costco android app on my Samsung S22 Ultra phone: "Unable to save passkey. For security reasons, 1Password did not save this passkey. The associated URL for this passkey does not match the selected app."
Hello folks,
Our development team has investigated the use of passkeys in the Costco app on Android. It looks like a configuration on Costco's end is preventing 1Password from properly validating the Costco app when using passkeys. We've reported the issue to Costco's team and hopefully this will be fixed by their team in the future.
For the time being, using another method to sign into the Costco app (such as your password) is the best workaround.
-Dave
Issue=FS-4398
14 Replies
- 1P_Dave
Moderator
Hello folks,
Our development team has investigated the use of passkeys in the Costco app on Android. It looks like a configuration on Costco's end is preventing 1Password from properly validating the Costco app when using passkeys. We've reported the issue to Costco's team and hopefully this will be fixed by their team in the future.
For the time being, using another method to sign into the Costco app (such as your password) is the best workaround.
-Dave
Issue=FS-4398
I just tried to create the passkey on my android 16 device. I got the message ender38 got, failed because the URL doesn't match the selected app. I then tried to create the passkey on windows. It created successfully and will allow me to login on with windows if I use the 1password prompt to login to Costco using a passkey. It won't work if I click on the Costco web app prompt to login using a passkey. When I try to login to using the Costco app on android 16 again after creating the passkey on Windows, I still get the same error, failed because the URL doesn't match the selected app.
Anyone have any suggestions? And what's the deal with the two prompts that pop up to login with a passkey, one from 1password and one on the costco web page? I found only the 1password prompt works?
On Bitwarden android there is an option to manually trust an application, "privileged apps". I hope this can be added to 1Password as well.
Update: I am not certain if this has been resolved...at least from my end. I went to the Costco website on my Windows desktop this evening and was able to create a passkey that was saved to 1Password. When I access the Costco app on my Samsung phone, the passkey is there as it shows that a passkey is saved in 1Password. So maybe this is a workaround. Unfortunately I did not try to set it up again from the phone.
Great news! Can confirm that Costco fixed it on their end. Seems like they did it by updating their passkey implementation to be industry standard :)
I believe what ender38 described below is still the case as of today. You can add the passkey via the browser, but not actually use it from the Android app due to this URL mismatch issue. I don't think adding the passkey from the android app works yet either.
TL;DR: If 1Password could make the error message here more informative, which would enable some workaround, that would be great.
It's not clear to me if the URL issue is with the passkey itself (and therefore not related at all to the other URLs associated with the 1Password login entry). If it is related at all to the URLs on the 1Password login entry as a whole, I think it would be really useful for this error message to show which URL it was attempting to use/compare against. At least then as a workaround, we can just add that URL into the entry. But I suppose if it is related to a different immutable URL (or something) associated with the passkey or embedded in it, this wouldn't really help anyone as they couldn't do anything about it except wait for costco to fix their app. I'm not really familiar with the standard, so I'm speculating somewhat.
Costco app version 25.11.2, 1Password Android 8.11.22
I also have the same issue. I did just did a test in chrome on windows 11 with the 1P extension and the passkey setup flow worked as expected there. When I already have a passkey setup for Costco from desktop and I go to use that passkey in the Android Costco App, 1P finds it based on the linking I have for Costco app with the Costco entry in my 1P accounts, then looks like it's failing passkey origin check.
I am having the same issue.
- 1P_Dave
I don't see any updates at the moment, the issue is still open in our development team's backlog. I'm sorry for the inconvenience.
-Dave
- 1P_Dave
Hello Sontan! 👋
I'm sorry that you're running into an error message when trying to save a passkey for Costco on your Android device. We've received other reports of the issue and have an internal work item open with our development team to investigate this further and find a fix.
For the time being, try saving the passkey using a different device (like a browser on a desktop computer). Alternatively, you can use a different sign-in method like a password until the issue is resolved.
-Dave
#26762
Costco's passkey implementation doesn't seem to be standard. When you pull up the Manage Passkeys page on Costco's site from a desktop browser, it doesn't properly trigger the desktop OS's passkey flow (nor the browser's passkey flow). They seem to allow passkey creation only via their app.
Not exactly clear this is a 1Password issue, but as far as Costco is concerned, I'm not going to use a passkey with their service unless I can save it in 1Password and use it on desktop, too.
