Signing back into the Community for the first time? You'll need to reset your password to access your account.  Find out more.

Forum Discussion

reck's avatar
reck
New Contributor
2 years ago

Add passkey AND two-factor authentication to logins

1Password told me I could add a passkey to my YouTube account which i've now done, but it now tells me I can add two-factor authentication and I get the alert on the login whenever I view it.

Don't passkeys mean that 2FA are no longer required or is the recommendation to add passkeys and two-factor authentication to every account that supports it? Thanks

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided

browser extension
  • 1P_Evon's avatar
    1P_Evon
    Icon for 1Password Team rank1Password Team
    2 years ago

    Hey reck,

    On behalf of David, you're welcome.

    Let us know if there's anything else we can help you out with.

    -Evon

  • reck's avatar
    reck
    New Contributor
    2 years ago

    Ok thanks. I’ll keep that in mind while I’m still using passwords.

  • 1P_Dave's avatar
    1P_Dave
    Icon for Moderator rankModerator
    2 years ago

    Hello reck! 👋

    Thanks for the question! Unlike passwords, you can’t create a weak passkey. Passkeys are generated by your device using a public-private key pair, which makes them strong and unique by default. Passkeys can’t be phished like a traditional password because the underlying private key never leaves 1Password – this also makes them resistant to social engineering scams.

    Two-factor authentication was designed to add an additional layer of protection to passwords against phishing. Passkeys are already resistant to phishing and can be considered to have the same level of security as a password plus two-factor authentication, with a lot less friction.

    That being said, as far as I'm aware Youtube will still allow you to log in using your password and there isn't yet an option to get rid of your password entirely. There are also some devices or websites that might not yet support passkeys so keeping your password for now, protected with two-factor authentication, is a good idea.

    -Dave