If 1Password offers to sign in with a passkey when support for passkey items is turned off

About the issue

With 1Password Business, you can turn off support for passkeys in the Autofill and “Passkey & WebAuthn saving” policies to prevent your team members from using their work account to save or sign in with passkeys.

In 1Password for your browser 2.15.1, we improved support for this policy by hiding the prompt to unlock 1Password when handling WebAuthn requests, like when you need to use a security key, Duo, or Okta for multi-factor authentication.

To make sure that the 1Password browser extension properly detects when support for passkeys is turned off, you and your team members may need to follow some additional steps.

What you can do

Follow these steps:

1. Make sure your team members have updated to 1Password for your browser 2.15.1 or later.
2. Make sure your team members unlock the 1Password browser extension at least once.

Tip

If your organization uses Duo with security keys, make sure that each team member clicks the button to complete the multi-factor authentication step when unlocking 1Password if prompted.

Get more help

If your team members still experience an issue where the passkey policies aren’t respected:

1. Temporarily turn on the passkey-related on 1Password.com, then select Save.
2. Turn the passkey-related policies back off, then select Save.
3. Reattempt the original steps.

If your team members are signed into another 1Password account in their browser, like a family account, they’ll continue to see 1Password offer to save and sign in with passkeys. They can select the button to use a different authentication option.

If your organization is still having trouble after following the steps above, contact 1Password Support.