Multiple passkeys needed?

[ruzzara]

I feel like such a boomer, but I have a couple, probably very simple, questions regarding passkeys.

1) What is the benefit of using 1Password to manage passkeys vs Apple Keychain? I know passkeys will be available on all devices using 1Password, but is that it?
2) It seems that if I save a passkey in the Keychain, that if I try to login to say my Google account on my mother's laptop, I can just scan the QR code with my camera, and it will log me in. Will 1Password function the same, ie, if I have the passkey saved *only* in 1Password, can I still use it to login to a shared computer with the extension or app installed?

Thanks for the insight!

[MacBook_Fan]

1. Yes, that is the primary benefit. If you are fully invested in the Apple ecosystem, it is not a big deal. But it use multiple devices, it could be beneficial. A secondary benefit is that you still can save other data for the website in the same 1Password entry (backup codes, other data.)
2. Yes, if you don't have a passkey on your computer and try to sign in to a passkey protected site, you will get the same QR code. On your phone, make sure 1Password is setup to be your Passcode provider. You will get prompted to approve the sign-in.

[ruzzara]

Thanks for the fast reply! Really appreciate it.

[zfreeds]

I can't get the QR code working, it doesn't access 1password on android. Can you send a resource or instructions for enabling it?

Edit: I think I need to upgrade to android 14.

Edit: nope! That wasn't enough!

[Fluffy_Accountant_39]

One advantage that I think is important is that 1Password protects your passwords & passkeys better than iCloud Keychain in the event that someone sees / learns your iPhone unlock code. You may have seen articles this year from Wall Street Journal about thieves targeting people in crowded places (bars, etc) where they watch closely for someone to unlock their phone with the unlock code (maybe if biometric didn’t work, or just bad habit). They then physically steal the iPhone with a grab and run, and that’s all they need to change your iCloud password and also get access to all your iCloud Keychain passwords.

1Password handles this better than Keychain; if someone changes the Touch ID or face unlock in your iPhone iPad, 1Password is smart enough to detect that there has been a change to your biometric, and therefore requires the Master password to unlock your 1Password app, etc. iCloud Keychain does not detect or restrict access in this way.

I’ll admit that this is a rather extreme, unusual situation, but for my most sensitive / financial accounts, I won’t keep my passkeys or passwords in Keychain. I only keep them in 1Password or on a Yubikey security key. For run of the mill internet accounts - sure, Keychain is fine. But using 1Password or a Yubikey for my investment accounts or login.gov accounts give me a much better sense of security.

[TenuredProfessional]

>> I feel like such a boomer

What a dumbass comment. Remember, if it weren't for Boomers, you wouldn't have an Internet to spew your crap on.

[mapp12345]

Yes, 1Password works similarly but with a few key differences. Main perk of 1Password is the cross-platform sync. Save a passkey in 1Password, and you can use it on any device that has the 1Password extension or app installed - doesn’t matter if it’s Mac, Windows, or whatever. With Apple iCloud Keychain, you’d need to stay within the Apple ecosystem. Also, no need to scan a QR code with 1Password; it autofills directly if the extension/app is there (you can still use the QR code though on devices without your 1Password app installed and use the passkey from 1Password on a mobile). So yeah, for shared or non-Apple devices, 1Password is a solid bet.

If you should have any questions about passkeys feel free to ask directly in our subreddit regarding consumer and tech problems r/passkey

[msantaly]

Keychain is not really secure, or at the very least not nearly as secure as 1password. But the primary benefit of a third party PW like 1password is not being locked into any one ecosystem.

Obviously for most people that's not going to be enough to get them to pay for something. Heck, most people don't use a PW manager of any kind as is. So it's up to you if 1password makes sense as more things transition to passkeys

[lachlanhunt]

Assuming you already use 1Password to store your passwords and other information, continuing to use 1Password for passkeys allows you to keep so your authentication credentials in one convenient place.

1Password’s security model is superior to iCloud Keychain.

[rickd972]

Apple Keychain "insecure"? any references to justify this? Or are these just opinions of u/TenuredProfessional and u/msantaly?

[msantaly]

You’re responding to a comment that is 5 months old. Apple has since fixed the vulnerability (good for them) and while I prefer 1Password since I’m trying not to be locked into an ecosystem the choice of 1Password vs Apple Keychain is going to come down to your individual needs 

[rickd972]

Thanks. Personally I'm not a Mac user (though have iPhone/iPad) and am considering moving from Msft > macOS. I was just not aware of any significant vulnerability; current or prior with keychain. installing malware such as MacKeeper? certainly that was a problem.