{"slug": "launching-post-quantum-safe-passkeys", "title": "Launching post-quantum safe passkeys", "summary": "1Password added support for ML-DSA post-quantum passkeys starting in version 8.12.44, creating the keys only for websites that support the algorithm. The company said research now estimates a cryptographically relevant quantum computer would need only 26,000 physical qubits to break elliptic curve digital signatures, down from roughly 13 million in 2023, while the largest current quantum computer has 6,100 physical qubits. NIST standardized ML-DSA in 2024 and the IETF standardized its COSE encoding in RFC 9964 in May 2026, the format WebAuthn/CTAP2 uses to transfer passkeys to websites.", "body_md": "[__Passkeys__](https://support.1password.com/save-use-passkeys/) make authentication safer by resisting phishing attacks and eliminating [__shared secrets like passwords__](https://1password.com/blog/passkeys-vs-passwords-differences) that attackers can steal from a website to access your accounts. By removing the secrets from servers, they reduce the risk of data breaches. However, advances in quantum computing threaten to increase the risk of those data breaches yet again by breaking the cryptography passkeys currently use. \n\nAs another step in our [__Post-Quantum Cryptography (PQC) migration__](https://1password.com/blog/post-quantum-cryptography), 1Password is adding support for ML-DSA passkeys in order to preserve their benefits over the long term. By supporting this algorithm early, we signal websites to start supporting ML-DSA passkeys. This helps protect our customers' credentials against future attackers.\n\nWe’ve talked about [__quantum computers and passkeys__](https://1password.com/blog/passkeys-quantum-computers-encryption) before, back in 2023 to be precise. Back then, a Cryptographically Relevant Quantum Computer (CRQC) seemed far off, so why are we rolling out quantum-safe passkeys only three years later? Well, because things changed and research has accelerated.\n\nWe’ve been closely monitoring the research to ensure we act well ahead of any concerning developments. Back in 2023, governments were mandating a migration to PQC algorithms by 2035, and the estimated amount of qubits estimated to be required to break elliptic curve digital signatures was around 13 million physical qubits. Now, in 2026, improvements in error correction and recent research reduce that estimate to only [__26,000 physical qubits__](https://arxiv.org/abs/2603.28627). This is still far from the latest largest quantum computer at [__6,100 physical qubits__](https://www.nature.com/articles/s41586-025-09641-4), though the gap has shrunk enough for us to [__start migrating__](https://1password.com/blog/post-quantum-tls-without-code-changes). \n\nNIST standardized the post-quantum safe signature algorithm, [__ML-DSA__](https://csrc.nist.gov/pubs/fips/204/final), in 2024. The IETF standardized ML-DSA’s encoding in COSE in [__RFC 9964__](https://www.rfc-editor.org/rfc/rfc9964.html) in May of 2026. COSE is the format that WebAuthn/CTAP2 uses to transfer the passkey back to the website. This means that the stage is set for ML-DSA passkey adoption.\n\nGiven all these advances and 1Password’s ongoing PQC migration, we decided to roll out ML-DSA passkeys as early as possible. By doing so, we can protect as many of our customers' online accounts as possible.\n\nYes.\n\nSupporting ML-DSA is precautionary. Since passkeys are generally long-lived, we want our customers to have the most secure passkeys available early on so they stay secure as long as possible. That’s why we’re providing support now rather than later. But your existing passkeys are still safe because no CRQC currently exists.\n\nThis support is early, earlier than most websites in fact. With this launch, we expect to see that change soon. We’re engaged in the W3C and the FIDO Alliance to develop a way to update existing passkeys seamlessly. So you don’t need to worry about updating passkeys now or in the future. We’ll take care of it for you! Automatically improving the security of all of our customers’ passkeys is yet another reason why we’re so excited about them.\n\nStarting on version 8.12.44, 1Password will support using the post-quantum safe algorithm, ML-DSA, for passkeys. This doesn’t mean that your passkeys are now all going to be made with ML-DSA going forward. Remember that both sides have to understand the same algorithm, so we will only create these keys for websites that support ML-DSA for passkeys.\n\nYou can test it yourself at [__webauthn.io__](http://webauthn.io/). Open Advanced settings, select an ML-DSA variant under Registration settings, then create a passkey and authenticate with it. Passkey authentication works on all supported platforms, but as of now, creating an ML-DSA passkey isn’t supported on iOS or through the native macOS autofill extension. Thanks to [__Matt Miller__](https://blog.millerti.me/) for adding ML-DSA support to [__webauthn.io__](http://webauthn.io/), the best WebAuthn test website there is!\n\nOur goal is to make this transition as seamless as possible, so we do all the hard work to keep you safe online, and you don’t even have to worry about it.\n\n1Password is helping prepare passkeys for the future of cryptography. Start using passkeys with 1Password today, and let us handle the hard work of keeping your authentication secure as cryptographic standards evolve.", "url": "https://wpnews.pro/news/launching-post-quantum-safe-passkeys", "canonical_source": "https://1password.com/blog/post-quantum-passkeys", "published_at": "2026-10-20 00:00:00+00:00", "updated_at": "2026-10-21 13:10:34.367854+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-safety"], "entities": ["1Password", "ML-DSA", "NIST", "IETF", "WebAuthn", "CTAP2", "FIDO Alliance", "W3C"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/launching-post-quantum-safe-passkeys", "markdown": "https://wpnews.pro/news/launching-post-quantum-safe-passkeys.md", "text": "https://wpnews.pro/news/launching-post-quantum-safe-passkeys.txt", "jsonld": "https://wpnews.pro/news/launching-post-quantum-safe-passkeys.jsonld"}}