Hello 1P_Dave additionally to the trusted device and the printed recovery code. As additional option: Did you ever thought about using certificates / digital signatures or similar which can be installed on HW keys like yubikey? So customer can choose to use passkey + trusted device; passkey + certificate on a hardware key or alternative use the backup code recovery process. The certificate on that HW key would registered like other installed trusted 1P instances and could be revoked as well in 1password.com
Hello,
\n\nI am testing the unlock with passkey feature currently with Yubikeys. I added two Yubikeys as a passkey and I am able to use them on my iPhone and on the browser. But one thing is really annoying:
\n\nthe requirement to authorize a new browser on a trusted device when connecting to 1password from a different browser and the impossibility to disable this behavior
\n\nWhy? Well let's describe a scenario which might happen quite easily...
\n\n... So simply by getting my phone stolen I am locked out of my digital identity because of that authorization : no emails, no social media account access, no banking app access ! Just a few examples of how annoying this can be.
\n\nNow don't come with you just have to setup a recovery code. Not only in my setup this is a big security leak (compared to simply adding enough backup yubikeys). Even if I do so, it won't be in my wallet while on holiday. It's in a bank deposit box or at home in some drawer.
\n\nI am aware that for most users the authorization feature is good and adds extra security especially if their master passkey is stored on the iphone itself.
\n\nBut please add an option to disable this. It's (in my opinion) compromising the ease of use of passkeys especially in an already secure enough scenario with hardware keys which are already a strong 2FA.
\n\n1Password Version: Not Provided
\nExtension Version: Not Provided
\nOS Version: Not Provided
\nBrowser: Not Provided
