Trouble using passkey on Amazon's website

Mork

Thanks for the reply. You can still use the passkey to login exclusively and take advantage of the phishing protection offered by passkeys since your passkey can only be used on the Amazon website.

As for the password, make sure that it's strong and unique: Use the password generator to change and strengthen your passwords

-Dave

That makes sense, of course, but after my posting about this above, I realized that "no way" would Amazon have anything from preventing the user from being able to log in and spend money. Therefore, if they didn't see this security hole already (big enough to drive a truck through...), nothing I can say will make any difference.
With Amazon (and others), it's all about the Benjamins....

Too bad they don't support Yubikeys like AWS does.

(So, sadly, the known password will probably always be an option.)

Mork

Thanks for the reply.

I was able to log in to Amazon using the regular password "OR" the passkey.

This looks to be how Amazon is currently rolling out passkeys, probably because passkeys aren't supported on every device yet so you'll still need your password in some places.

I would recommend sending feedback to Amazon to let them know that you'd like the ability to turn off your password for Amazon entirely once a passkey has been created. 🙂

-Dave

Hi Dave,

I got the passkey installed and working again using Safari. In Safari, I did see the Passkey prompt.

However, I think the Amazon model is totally wrong if I understand it.

I was able to log in to Amazon using the regular password "OR" the passkey.

It SHOULD BE this way:

1. Password comes first (or not at all)
2. Passkey next

If the goal is to eliminate passwords, why is password even an option after you setup the passkey. Makes no sense.

---

AWS (yes, still Amazon, but different) works this way (no either Password or Passkey).

You log in to AWS and then still have to use your Yubikey (after password). That flow is how it should be (or no password at all).

If all sites act like Amazon with Passkeys (Password or Passkey), yikes!, I'll stick to Yubikeys.

Thanks,

Mork

Thanks for the reply. Your passkey replaces your password. Did you follow the steps listed here to save your passkey: https://passkeys.directory/details/amazon/

If you did then would you be able to post a screenshot of the section on Amazon's website that says that you've setup a passkey for your Amazon account? Make sure that nothing sensitive is visible in the screenshot.

-Dave

I don't see the "Sign in with a passkey" even though both Amazon says one is saved and 1P says the same thing.

Do I need to start over and create one anew?

Shouldn't the password be required in addition to the passkey not optionally instead of it?

Thanks

Hello Mork! 👋

Thanks for the question! Just like with your passwords, your passkeys are also stored in 1Password and protected using the same end-to-end encryption and security. Once saved in 1Password, you'll have access to that passkey in the 1Password app on all of your devices.

Once you've saved a passkey for your Amazon account in 1Password, you'll click on the Sign in with a passkey button on Amazon's website that's located beneath the password field:

You can find more information about using passkeys here: Save and sign in with passkeys in your browser

Let me know if you have any questions. 🙂

-Dave