Signing back into the Community for the first time? You'll need to reset your password to access your account. Find out more.
Forum Discussion
"Unlock 1Password with a passkey (beta)" - non-iCloud keys need support!
I've been a 1Password customer for a long, long time. I'm now moving to a passkey based system where I use physical security keys.
I was excited to try out the "Unlock 1Password with a passkey (b...
I think you are referring to the thread here:
https://1password.community/discussion/comment/713088/#Comment_713088
In the thread, 1P_Tommy says that a recovery code basically replaces the need to know the password and/or secret key. A 2FA method, if required, is still needed to log into the account.
But this is for the regular 1Password accounts with a password and secret key.
For 1Password accounts with a passkey as the login method, the situation has to be different. My understanding is that in this case, the recovery code (along with access to the associated email address), is all that is required to get into the account.
After all, recovery codes were created at first on the passkey-for-login account type, then later moved to the general password-for-login account type.
- Regular account (password + secret key) + MFA on => recovery code + email access + MFA needed.
- Regular account (password + secret key) + MFA off => recovery code + email access needed.
- Passkey login account (passkey only) => recovery code + email access needed.
This is my understanding. I do not know why 1Password chooses to require the MFA for the regular account (password + secret key + MFA) when using the recovery code. It does not seem necessary.
