About the issue
On August 23, 2023, a new team policy was added to 1Password Business, which allowed you to manage whether team members could save and sign in with passkeys.
On September 13, the 1Password browser extension was updated with support for saving and filling passkeys. After this update, team members who were signed in to their business account in the browser extension were presented with an unlock prompt for passkeys when attempting to sign in to a WebAuthn-enabled site if the extension was locked. This occurred even if the policy in their account didn’t allow passkeys to be saved or used to sign in.
What was affected
From September 13 to 21, team members using 1Password in the browser version 2.15.0 may have seen prompts to save or use passkeys when the extension was locked.
What you should know
If you use 1Password Business and had the “Passkey item support” policy turned off, your team members who were using version 2.15.0 of the 1Password in their browser may have been prompted to unlock to use a passkey. After they unlocked 1Password, however, they wouldn’t be able to save a passkey. This issue only presented the option, but didn’t allow passkeys to be saved.
What we’re doing
To mitigate this issue, on September 14 and 15, the 1Password browser extension development team adjusted the experience that caused the passkey prompt to appear. Between September 16-21, the browser extensions for Chrome, Firefox, Edge, Brave, and Safari were updated to version 2.15.1, which respects the passkey policy set within business accounts.
To prevent an issue like this in the future, we plan to:
- Improve internal communication between the development teams and customer-facing teams, such as Customer Success, which will help prepare customers for new features.
- Revise our roll-out procedures for new team policies.
- Update our testing procedure to validate consistent applications of policies in different account types (for example, family and business accounts).
- Improve communication with business and enterprise customers affected by new policies.
If you have further questions about this issue, reach out to your Customer Success Manager.