All iPads Passkeys - Create in Password Manager or iCloud Keychain

[violetdudley]

Using a password manager (1Password) passkeys for several login entries have been created. In those involving Apple sign-ins (ID, iCloud, etc) the password manager creating the passkey offers a choice of storing the passkey in the manager app or in iCloud keychain. Is there any downside in this binary to not using the iCloud keychain option? Much yet to be learned about passkeys here.

FWIW, the passkeys are functioning smoothly in all cases.

 

[MisterSavage]

Do you have Stolen Device Protection turned on? If not I wouldn't be comfortable with passkey access being allowed with just entering the phone's pin code.

 

[KaliYoni]

choice of storing the passkey in the manager app or in iCloud keychain. Is there any downside in this binary to not using the iCloud keychain option? Much yet to be learned about passkeys here.

FYI, this post provides a good overview of passkeys:

Are Passkeys useful with no biometric login?

First, I completely get the visceral reaction to storing biometric verification credentials. You’ve only got ten fingerprints, two irises, and one face — what’re you supposed to do when they’ve all been hacked? But the dispassionate analysis shows that those fears are not just unfounded, but...

forums.macrumors.com

My view on where to store passkeys for Apple accounts is based on risk management. A risk of storing those passkeys outside of iCloud, especially if the password manager provider is storing passkeys on its servers and it is a company with fewer financial and staff resources relative to Apple, is the company could have a higher likelihood of shutting down, getting sold to another company, or not being able to withstand an attack on its infrastructure. In any of these cases, you could end up losing access to your passkeys or having to make changes to your login routines quickly and under pressure.

So, it might make sense for you to separate where passkeys you regard as mission critical are stored from your other passkeys.

 

[Alpha Centauri]

I use 1P also and like the functionality of storing notes, license keys, etc. Passkeys have worked well for me, some sites make a fuss of Passkeys+2FA and the OTP clipboard, but mostly it's fine. The 1P support has always been quite prompt with issues and questions so that's an important aspect for me. Unless I've misunderstood the question, I think using 1P and Apple's keychain (the binary bit you wrote?), will be too much work to keep synched/ up to date.

 

[ericwn]

I use 1Password for years and am happy with it.

 

[DHKaplan]

1P IS great, but at the moment they say that they can't store Apple ID passkeys. https://1password.community/discussion/143585/unable-to-add-apple-id-passkey-to-1password