Forum Discussion

snoringelephant's avatar
snoringelephant
Frequent Contributor
5 days ago

Passkey CR - Allow 1P To Scan QR Code

 

There are many times when I am browsing in some browser (like Safari, Edge, etc.) and the site recognizes that one or more passkeys have been created for the site and it pops up a prompt asking for to use a device (such as a phone, tablet, etc.) where some biometric authentication can be used to access the device's passkey.

However, since I am saving my passkeys in 1Password, I am handcuffed at this prompt since there doesn't appear to be any way for me to use the passkey that is stored in 1Password for the site and  scan the QR code.

It seems like 1Password should be able to scan the QR code that the popup window presents and use the saved passkey for the site.  I don't know exactly how this would be invoked.  My guess it would be some option to use the passkey from some saved login entry.

May you please pass this along to see what the developers think of this idea?

If anyone else is interested in having this feature, please feel free to like/comment/watch.

Thanks.

 

browser extension
passkeys

2 Replies

  • snoringelephant's avatar
    snoringelephant
    Frequent Contributor
    3 days ago

    Thanks for the reply 1P_Dave​ .  I'm sorry it took me a couple of days to get back to you.  I didn't see the notice of your reply.

    1P_Dave wrote:

    The QR code is only meant for other devices to scan it, it's not designed for a password manager (like 1Password) to scan it on the same device. 

    Yup...I got that.  My idea was that maybe I could use the 1Password app (running on my iPhone, for example) and give permissions for my iPhone's 1Password app to have access to my iPhone's camera....and then there could be some feature of the 1Password app that it would use the iPhone's camera to scan the QR code that is being presented on my mac and use the passkey that 1Password has stored for a specific login.   1Password already has the ability to "Scan QR Code" on an iPhone when adding a One Time Password.  My idea is to add similar feature to be able to scan the QR code which is asking for the passkey authentication (and do the necessary 'webauthn' request the QR code is prompting for).

    My specific use-case is the following:

    • From an Edge browser, select "Set up new personal profile" from the existing profile's icon

     

    • From the new Edge browser window, select "Add new account" from the "Choose an account" section of the main window that pops up:
    • Then enter your Microsoft email account (for which you have stored a passkey in your 1Password vault):

    and hit "Next"

    • Then...this "Sign in" window pops up and asks for the device that contains the passkey (and, in my future 1Password world, I would be able to open 1Password on my iPhone, select the Microsoft account in my vault and open some currently-non-existent feature that would scan the resultant QR code to allow me to sign in) 

    This is my use case.

    I don't know if this is possible, but your developers seem to perform miracles on a daily basis, so I thought I would throw it out there!   :) 

    Thanks for your consideration.

    NOTE:  Regarding whether or not the 1Password extension has been downloaded, this use case is trying to create a new Edge profile -- which opens as a 'clean slate' and does not have any extensions or plugins installed (or custom configuration either ... like disabling the Edge native passkey handling).  The point of having different Edge profiles (similarly to Chrome profiles) is to be able to set up different customizations, extensions, bookmarks, etc. depending on which profile you are using.

  • 1P_Dave's avatar
    1P_Dave
    Icon for Moderator rankModerator
    5 days ago

    Hello snoringelephant​! 👋

    Thanks for reaching out! The QR code is only meant for other devices to scan it, it's not designed for a password manager (like 1Password) to scan it on the same device. 

    When signing into a website in the browser on your Mac, the website will send a webauthn request and 1Password will respond to that webauthn request by showing a prompt that you can click to sign in with your passkey: 


    In your case, it looks like 1Password isn't receiving the webauthn request since you're seeing a prompt from macOS itself. Can you tell me the following: 

    1. Do you have 1Password installed in all of your browsers: Download 1Password for your browser
    2. Is the built-in password manager turned off in all browsers using these steps: Turn off the built-in password manager in your browser


    If those two steps look good then can you share the specific Microsoft website that you're trying to sign into so that I can try to reproduce the issue on my end? And are you signing into a personal Microsoft account? Or a work/school account? 

    -Dave