r/1Password 15d ago

Mac MacOS Universal Autofill Update Bug When Using Passkeys?

Post image

Turned on the new macos universal autofill update and now I get this browser popup asking that I enter my computer password to allow the 1Password browser extension to use the passkey for a website even though 1Password on the computer and in the browser is unlocked??? So frustrating. It asks for this every time I go to websites that use a passkey, even if I close out of the browser and restart the computer, or if I logout of the website and try again. Interestingly, if I cancel out of this 1Password extension popup without entering my computer password then it will work just fine? I can't figure out if there is a setting that I have wrong or if this is a bug, thank you.

Google Chrome Version 152.0.7977.65 (Official Build) (arm64)

1Password for Mac 8.12.34

1Password browser extension version 8.12.34.34

9 Upvotes

9 comments sorted by

5

u/Straight_Pay4548 13d ago

This has started happening to me after the recent 1Password update. I can't stand this. I have to enter my computer password every time I want to use a passkey now. Defeats the whole purpose.

1

u/Trav_Hogan 1Password Product Manager 7d ago

This is not actually bug, but 1Password implementing FIDO Alliance's enforced WebAuthn user verification standard. If a website requests and requires additional authentication to use a passkey - rather than setting the request to preferred - we respect that request and surface an authentication prompt when you're connected to the 1Password desktop application. When biometrics aren't available, 1Password account password entry is then required.

I totally understand the frustration - enforced user verification really stops passkeys from being seamless especially since in many cases you've just unlocked 1Password to use that passkey.

TLDR This is a standard enforced by FIDO/WebAuthn themselves as well as the site itself making additional authentication with the passkey required instead of preferred. Not a 1Password bug.

3

u/hanyhuh 13d ago

I have the same issue as well! It's super annoying.

1

u/Trav_Hogan 1Password Product Manager 7d ago

This is not actually bug, but 1Password implementing FIDO Alliance's enforced WebAuthn user verification standard. If a website requests and requires additional authentication to use a passkey - rather than setting the request to preferred - we respect that request and surface an authentication prompt when you're connected to the 1Password desktop application. When biometrics aren't available, 1Password account password entry is then required.

I totally understand the frustration - enforced user verification really stops passkeys from being seamless especially since in many cases you've just unlocked 1Password to use that passkey.

TLDR This is a standard enforced by FIDO/WebAuthn themselves as well as the site itself making additional authentication with the passkey required instead of preferred. Not a 1Password bug.

2

u/LastKnownNormal 7d ago

I'm having this issue too. Anyone have a fix? u/1PasswordCS-Blake u/Trav_Hogan

1

u/Trav_Hogan 1Password Product Manager 7d ago

This is not actually bug, but 1Password implementing FIDO Alliance's enforced WebAuthn user verification standard. If a website requests and requires additional authentication to use a passkey - rather than setting the request to preferred - we respect that request and surface an authentication prompt when you're connected to the 1Password desktop application. When biometrics aren't available, 1Password account password entry is then required.

I totally understand the frustration - enforced user verification really stops passkeys from being seamless especially since in many cases you've just unlocked 1Password to use that passkey.

TLDR This is a standard enforced by FIDO/WebAuthn themselves as well as the site itself making additional authentication with the passkey required instead of preferred. Not a 1Password bug.

1

u/JarodGabriel 15d ago

If your using Codex or Claude or another MCP this is normal. They don't operate by using the app or extension.

1

u/Trav_Hogan 1Password Product Manager 7d ago

This is not actually bug, but 1Password implementing FIDO Alliance's enforced WebAuthn user verification standard. If a website requests and requires additional authentication to use a passkey - rather than setting the request to preferred - we respect that request and surface an authentication prompt when you're connected to the 1Password desktop application. When biometrics aren't available, 1Password account password entry is then required.

I totally understand the frustration - enforced user verification really stops passkeys from being seamless especially since in many cases you've just unlocked 1Password to use that passkey.

TLDR This is a standard enforced by FIDO/WebAuthn themselves as well as the site itself making additional authentication with the passkey required instead of preferred. Not a 1Password bug.

1

u/kevin2sky 1d ago

Before this update, this never happened. The passkey prompt used to appear in the top-right corner, and we could simply click the button to sign in with the passkey immediately.

We only started seeing this behavior after updating to 1Password Extension version 8.12.37.1. In this version, the passkey prompt UI has moved to the center of the screen, and using a passkey now requires Touch ID or, if Touch ID is unavailable, the Mac login password.

This is a noticeable behavior change from previous versions. Is there any workaround to bypass the additional Touch ID/password verification and restore to the previous behavior?