1Password adds post-quantum passkeys, but websites and devices still determine availability

1Password announced support for ML-DSA passkeys on October 20, starting with version 8.12.44. A website must support the algorithm before 1Password can create that type of passkey for the account. The update does not mean every existing credential has already migrated.^[1]

The company says authentication works across its supported platforms. Creating an ML-DSA passkey is not yet supported on iOS or through the native macOS autofill extension. Its announcement describes the rollout as precautionary and explicitly says existing passkeys remain safe today.

Compatibility is the everyday story

For a person signing in to an account, the useful question is which combination of website, application and device actually works. An available feature in a password manager answers only one part of that question. A clear adoption experience would let someone recognize whether a particular account used the new option.

Consider someone who regularly changes devices. Successful registration would be the beginning of their assessment. They would also want ordinary sign-in, access from another device and recovery after losing a device to behave predictably. A migration becomes easier to trust when those familiar tasks remain understandable.

The announcement also creates a practical opportunity for service operators. They can assess a specific supported authentication path and document the experience their users should expect. That is more actionable than a broad assurance about being ready for future threats.

QubitWire’s assessment is that the compatibility details deserve as much attention as the cryptographic label. The next useful evidence would be verified production-site adoption and clear documentation of registration, recovery and fallback behavior. This update supplies an adoption step; it does not establish that every online account now uses post-quantum authentication.