Using passkeys without the browser extension

I agree with alock. While the browser extension does offer a pleasing user experience, as mentioned by you, 1P_Dave, I personally prioritize minimizing the attack surface. I guess not installing the extension in a potentially dangerous environment (1Password – About the security of 1Password in your browser: "Limit your use of other browser extensions. A malicious or badly made browser extension could interfere with 1Password or attempt to expose your data. If you need to use untrusted extensions, consider using a separate browser profile just for 1Password.") and therefore no inter-process communication between the native app and the browser extension enhances security, even though the risk might be low. On macOS the autofill feature works just fine for me.

Beyond my security considerations, I'd be really excited to see passkeys function beyond the browser on non-mobile operating systems, ideally with a direct communication not only between the browser and the 1Password app (without requiring an extension, much like accessing a passkey directly on a FIDO security key) but between all native apps and the 1Password app. This could involve a process similar to the experience on iOS (and hopefully soon Android 14) such as opening a native app, selecting "Login with passkey," and triggering a 1Password pop-up that prompts you to "Unlock the vault" and choose from a list of available passkeys.

1P_Dave: Could you provide insight into the feasibility of this idea? I understand that it might depend on the willingness of OS vendors like Apple and Microsoft to integrate the necessary APIs. However, are there any plans within the FIDO ecosystem to move in this direction?

Thanks a lot for the awesome and speedy work on getting passkeys integrated into 1Password. It's pretty cool to see you guys ahead of the curve while other password managers are still trying to figure it out. I love the new login experience (when the browser extension is installed).