Passkeys

If 1Password offers to sign in with a passkey when support for passkey items is turned off

Learn what to do if your team members are prompted to unlock 1Password to handle a WebAuthn request when passkey item support is turned off in your business account.

About the issue

With 1Password Business, you can turn off passkey item support to prevent your team members from using their work account to save or sign in with passkeys.

In 1Password for your browser 2.15.1, we improved support for this policy by hiding the prompt to unlock 1Password when handling WebAuthn requests, like when you need to use a security key, Duo, or Okta for multi-factor authentication.

To make sure that the 1Password browser extension properly detects when support for passkeys is turned off, you and your team members may need to follow some additional steps.

What you can do

Follow these steps:

  1. Make sure your team members have updated to 1Password for your browser 2.15.1 or later.
  2. Make sure your team members unlock the 1Password browser extension at least once.

Tip

If your team uses Duo with security keys, make sure that each team member clicks the the security key icon button to complete the multi-factor authentication step when unlocking 1Password if prompted.

Get more help

If your team members still experience an issue where the passkey policy isn’t respected:

  1. Temporarily turn on passkey item support on 1Password.com and click Save.
  2. Turn passkey item support back off and click Save.
  3. Reattempt the original steps.

If your team members are signed into another 1Password account in their browser, like a family account, they’ll continue to see 1Password offer to save and sign in with passkeys. They can click the the security key icon button to use a different authentication option.

If your team is still having trouble after following the steps above, contact 1Password Support.

Published: