1Password Expands Passkey Support to Its Mobile Apps

pcmag.com:

The password manager that’s been among the biggest boosters of passkey security now has its mobile apps on board with this new, no-password-needed authentication standard. 

1Password's Android and iOS apps can now save and sign in with passkeys, matching the features shipped in its browser extensions in June. It also catches 1Password up with rival Dashlane, which added passkey creation and management to its mobile apps earlier this summer. 

The Toronto firm’s press release also notes that sometime this fall, 1Password users will be able to use passkey security with their 1Password accounts. That's a step toward the company’s eventual goal of offering a password-manager service that does not require you to memorize its own complex and mission-critical password.

For the uninitiated, the passkey standard offers the genuine promise of taking people to a post-password online existence. It confirms that it’s you logging in by having you authenticate your access via the biometric security (or a numeric passcode) on a second device–often a phone, but you can use a tablet, laptop, or desktop too. 

Phishing attacks don’t work against this system because even a carefully crafted lookalike login page that might fool you into typing in a two-factor authentication code will be at the wrong domain name for the passkey. 

And while a data breach can leave attackers with access to a site’s password database, passkeys live on your own devices, with synchronization between them done via end-to-end encryption by password managers and services from Apple and Google.

(An attacker that both seized your trusted device and compelled you to unlock it for passkey authentication could still defeat this system, but in that scenario your problems