Forum Discussion

rgev's avatar
rgev
New Contributor
2 years ago

We *need* Passkey export support (!)

It is a shame that nothing is being done here and update notes (at least for the Mac version) are misleading. They state that import of passkeys is possible from 1PUX files if they belong to the ...
macos
PastaShock's avatar
PastaShock
Frequent Contributor
8 months ago

What's the status of passkey export?

This isn't just a 1Password problem. Why the heck was export and import not part of the spec when passkeys first came out? The FIDA alliance are bunch of smart people.

I've read that the FIDO Alliance is working on adding export and import as part of the spec, but it will be an OPTIONAL feature, not MANDATORY.

Passkeys = vendor lock-in.

No, thank you.

Yes, I see the advantages of passkeys. But being locked into a vendor because you can't move your passkeys makes it DOA. I'm sure 1Password doesn't think this way, but I guarantee you Apple. Google and Microsoft all immediately saw that lack of export/import and they immediately saw the vendor lock-in potential.

If the FIDO Alliance isn't going to offer passkey export as part of the spec in a timely manner, I think 1Password should figure out their own solution and deploy it.

The only software that lets you export passkeys right now is Keepass.

I had about a half dozen passkeys set up. I have deleted them all and gone back to a password with 2FA.

  • 1P_Dave's avatar
    1P_Dave
    Icon for Moderator rankModerator
    8 months ago

    PastaShock​ 

    Thanks for reaching out! 1Password is currently working with our partners at the FIDO Alliance on the Credential Exchange Protocol (CXP) and the Credential Exchange Format (CXF) that will allow users to securely transfer passkeys from one credential manager to another. You can read more on our blog: Coming soon: Securely import and export passkeys (I posted this elsewhere in this thread but I'm sharing it here as well in case it was missed by anyone.)

    Passkeys are designed to be more resistant to phishing than passwords and it's important that any export functionality does not undermine that security feature. It's also important that any exported passkeys can be imported by other password managers (otherwise the feature won't be very useful), which is why it's important for us to work with our partners at the FIDO Alliance to develop an industry standard that is compatible with, and adopted by, all password managers. 

    For the time being, you can create a new passkey for a website any time within your new password manager and remove any existing passkeys from other providers. Hopefully there will be more news to come soon!

    -Dave