Can't use passkey on Github.com

Options
JeroenVdb
JeroenVdb
Community Member
edited September 2023 in 1Password in the Browser

I added a passkey to my Github account via Chrome on my Macbook with MacOS. When I created the passkey 1Password asked to save the passkey to my Github entry, which it did and all went fine.

When I try to use it to log in it fails.

  1. Open Chrome
  2. Go to github.com
  3. Input username and password
  4. passkey QR code appears
  5. I scan with my iOS device (1Password has synced to the github item has the passkey)
  6. I get the suggestion to use the Github item from 1Password
  7. Next I get a screen with a suggestion for the Github item, whatever I do, nothing happens and the camera app opens again, login failed.

I made a screencap: https://we.tl/t-8TbYnV79OO

1Password Version: 1Password for Mac 8.10.15 (81015001)
Extension Version: 2.15.1
OS Version: 13.5.2 (22G91)
Browser: Chrome 117

Comments

  • steph.giles
    steph.giles
    Options

    Hey @JeroenVdb,

    I'm sorry for the delayed response.

    I have done some testing and I was able to recreate the same behaviour that you are seeing when using my iOS device. With that being said, you shouldn't need to use your iPhone to sign in, 1Password in your browser should be offering to fill your passkey here.

    If you click on the 1Password icon in your browser toolbar do you see your Github item here with a passkey saved?

    The expected flow would be when you click 'Use passkey' you will see a prompt from 1Password in the top right hand corner of your screen offering to sign you in with your passkey. Do you see this on your end?

  • JeroenVdb
    JeroenVdb
    Community Member
    Options

    you shouldn't need to use your iPhone to sign in, 1Password in your browser should be offering to fill your passkey here.

    Unless I don't completly understand the use of passkeys I don't fully agree.

    I would expect I can login with my passkey on a new/other/public computer where I don't have the 1Password extension and app available. Or am I seeing this wrong?

  • Dave_1P
    Dave_1P
    edited September 2023
    Options

    @JeroenVdb

    Thanks for the reply, I agree that the functionality should be working. I just tested things on my own device and everything is working when signing in using a passkey with 1Password on iOS on both Chrome and Brave on my Mac.

    I think what might be happening here is that you saved a passkey for two-factor authentication rather than for login. If you were using a passkey for sign in then the Github page should say "Sign in to Github" but it says "Two-factor authentication" in your screen recording.

    Can you go to https://github.com/settings/security, turn off two-factor authentication, and then save a passkey for sign in 1Password using these steps: Passkeys.directory - Github

    Make sure to first turn off two-factor authentication with the old passkey. The new passkey for sign in will replace the old passkey for two-factor authentication.

    Let me know if that works. 🙂

    -Dave

  • JeroenVdb
    JeroenVdb
    Community Member
    Options

    @Dave_1P you are correct. I had a passkey used for both login and MFA.

    Github also enforces MFA so I guess I can't remove it but change it to using the classic TOTP.

  • XIII
    XIII
    Community Member
    Options

    I think what might be happening here is that you saved a passkey for two-factor authentication rather than for login. If you were using a passkey for sign in then the Github page should say "Sign in to Github" but it says "Two-factor authentication" in your screen recording.

    GitHub is rather smart about that and will offer to upgrade “2FA passkeys” to “real passkeys”.

    At least, that’s what happened for me (for already registered YubiKeys).

    More info: https://github.blog/2023-07-12-introducing-passwordless-authentication-on-github-com/#how-to-upgrade-security-keys-to-passkeys

This discussion has been closed.