X

1Password Passkey Support Will Let You Dump Your 1 Password

Login technology is slowly moving beyond today's feeble password technology.

Stephen Shankland Former Principal Writer
Stephen Shankland worked at CNET from 1998 to 2024 and wrote about processors, digital photography, AI, quantum computing, computer science, materials science, supercomputers, drones, browsers, 3D printing, USB, and new computing technology in general. He has a soft spot in his heart for standards groups and I/O interfaces. His first big scoop was about radioactive cat poop.
Expertise Processors, semiconductors, web browsers, quantum computing, supercomputers, AI, 3D printing, drones, computer science, physics, programming, materials science, USB, UWB, Android, digital photography, science. Credentials
  • Shankland covered the tech industry for more than 25 years and was a science writer for five years before that. He has deep expertise in microprocessors, digital photography, computer hardware and software, internet standards, web technology, and more.
Stephen Shankland
2 min read
Passkey authentication on an iPhone relies on possession of your phone and a Face ID unlock.

Passkey login using an iPhone

CNET

Password manager 1Password will let you protect your vault of passwords with a passkey starting this summer, embracing an authentication technology designed to be as easy to use as passwords but more secure.

Password managers are great when it comes to creating and remembering the dozens or hundreds of passwords we have in our lives, but that single password can be a point of weakness for a hacker trying to gain access to all your accounts.

"For passkeys to be the way forward, it's not enough for them to replace some of your passwords," Chief Product Officer Steve Won said in a blog post Thursday. "They have to be able to replace all passwords — including the one you use to unlock 1Password."

Apple, Microsoft, Google developed passkeys with technology they helped create in an industry group called the FIDO (Fast Identity Online) Alliance. Passkeys use an approach related to that of hardware security keys, the strongest login technology around, but are designed to be easier to use when logging in to an app or service.

To use passkeys, you'll need a possession of a device like a phone or PC registered with the app or service and a second authentication step it performs, most likely a biometric scan of your face or fingerprint. Passkeys advocates believe they'll be as easy to use as passwords, but much safer.

Among their advantages: They block phishing attacks since they simply don't work on counterfeit websites designed to fool you into sharing your login. And passkey login takes place on your phone or PC, which means there's no password data a hacker can steal from a cloud service.

1Password has a second authentication protection called a secret key needed to access your password on a new device, so even if somebody gets your master password, it's not necessarily a disaster. In any event, though, passkeys are better, Won said, "a win-win for both security and usability."

Apple added passkey support to iOS in 2022, and Google is adding it this year to Android after adding it to Chrome in 2022. Most of us are likely to establish, store and sync passkeys using Google or Apple password managers, though 1Password competitor Dashlane started beta-testing passkey support for logging in to passkey-supporting sites and apps in September.

With 1Password's approach, once you set up passkey authentication on one device, for example your phone, you can extend it to another trusted device using existing passkey QR code technology, 1Password said.

Among sites that support passkey login are eBay, PayPal, Okta, Docusign, Microsoft and Robinhood.

Correction, Feb. 10: Updates the time when Dashlane started beta-testing passkey support. That began in September.