The landscape of digital security is evolving, particularly with the introduction of a new Windows API that allows third-party applications to manage passkeys more effectively. This development is a significant leap forward in simplifying the often convoluted world of passkey technology, which has been known to perplex even the most tech-savvy users. The first password manager to embrace this innovation is 1Password, setting a precedent for others in the industry.
Passkeys made simpler
While the experience of using passkeys is not yet entirely seamless, it is becoming increasingly user-friendly. The primary challenge users face is determining where to store their passkeys. For those with Windows Hello configured, the system often defaults to managing passkeys, which can lead to confusion when trying to utilize a preferred password manager like 1Password. Fortunately, this complexity is on the verge of resolution.
1Password is poised to enhance user experience by leveraging a new native passkeys plugin API, allowing it to integrate smoothly with Windows 11. Once this integration is enabled, 1Password will take over as the credential manager, enabling users to create passkeys on any device and manage them effortlessly through 1Password, all while using Windows Hello for authentication.
How it works
This feature, which was previously available only to those testing a Windows Insider preview, is now accessible to anyone running the latest version of Windows 11 alongside the newly released MSIX version of the 1Password app. MSIX, a modern packaging format for Windows, ensures that applications remain isolated from the system, simplifying the cleanup process when uninstalling or resetting apps.
Upon meeting these prerequisites, users will find that 1Password prompts them to enable the passkey feature directly within the desktop application. Alternatively, this feature can be activated manually by navigating to Settings > Autofill and selecting the “Show passkey suggestions” option. The final step involves designating 1Password as the system authenticator in Windows, which can be done through Settings > Accounts > Passkeys > Advanced options, allowing users to select any compatible third-party application.
Once this configuration is complete, users will notice a new prompt when creating a passkey, indicating that Windows will now utilize the selected credential manager instead of its default settings. Windows Hello will seamlessly handle the authentication process, streamlining the overall experience.
What’s next?
As the first third-party provider to implement this integration, 1Password is paving the way for other password managers to follow suit. Users of Bitwarden or Dashlane should stay tuned for updates regarding their respective passkey plugin support. Additionally, Windows is developing its own passkey synchronization mechanism, providing users with an alternative should they prefer not to rely on third-party tools.
It is important to note that, at this stage, passkeys do not replace existing credentials. Instead, they serve as a more convenient alternative to traditional username and password combinations. While a select few sites and services offer fully passwordless options—such as Microsoft accounts—these typically cater to advanced users and necessitate careful management to avoid potential lockouts.
In the coming weeks, I will be testing the new 1Password integration and will provide updates with firsthand insights into its functionality and user experience.