eBay prompting for passkey now?

Morph000 · May 9, 2025

I got the attached passkey prompt when I logged in to eBay today, but I can't find any way of disabling it.

No setting in eBay, no setting in Vivaldi browser, no setting in Windows security.
I don't use Hello (not setup at all). No passkeys setup at all.
Any ideas?

dacrone · May 9, 2025

Check your browser autofill settings for an option similar to this:

Stigg · May 9, 2025

Everywhere that I've been prompted to upgrade to passkeys, they say that they're easier than passwords. So far, I haven't noticed that.

FreeBooter · May 9, 2025

I will show you how to generate, use, view, and delete passkeys on your Windows 11 PC.

glasskuter · May 9, 2025

There is no way I have found to stop EBAY from prompting you to set up a passkey when you log in. Every time you login to EBAY it will keep asking you to set up a passkey so you have to select "not this time", then login with your password. Lots of folks complaining about the fact that EBAY does not give the user an option to stop the prompts.

If you have already set up a passkey for EBAY but do not want to use it, you can clear all passkeys by clicking arrow to the left of your name in upper left corner of EBAY page, select account settings. Select personal information. Then click sign-in and security. Under Passkeys click "remove all passkeys".
For any other site that one has set up a passkey, such as Amazon, you can go into your account settings for that site and delete the passkey as well.

Morph000 · May 10, 2025

Not autofill.
Firefox logs into eBay ok though so a Vivaldi issue by the looks of it...

Morph000 · May 13, 2025

Ok, seems ok now.
There were 4 strange name websites seemingly nothing to do with eBay under Vivaldi's Global permissions, which have been there for a while.
Deleted them and all fixed.

Stigg · Jul 18, 2025

FreeBooter said:
I will show you how to generate, use, view, and delete passkeys on your Windows 11 PC.

I'm finding it more convenient to use a password manager to store passkeys rather than storing them on a Windows device (for example).

That way, you only have to do the process once per site instead of having to set them up on each individual device.

KevTech · Jul 18, 2025

On Firefox

about:config

Find: security.webauth.webauthn

Set to false

cheaterslick · Jul 18, 2025

KevTech said:
On Firefox

about:config

Find: security.webauth.webauthn

Set to false

And this does, what?

antspants · Jul 18, 2025

Many major sites asking if you want to use a passkey, now.
Doesn’t matter what setting you disable IMO. I believe websites are being coded to always prompt for FIDO2/WebAuthn passkey creation or login if the browser supports it, even if the user doesn’t want to use it. I get prompted once per day at Amazon. Non of my browsers have Windows Hello or any other related setting, toggled on.

All it does, for me, is make me question the agenda with passkeys.

Marcus Vinicus · Jul 19, 2025

A really good starting point is this tutorial below at these forums. There are other tutorials listed at the end.

Create and Save Passkey for Website in Windows 11

This tutorial will show you how to create a passkey for a website and save the passkey in Windows 11. Passkeys provide a more secure and convenient way to sign in. With passkeys, you can use Windows Hello to sign in with a PIN, facial recognition, or fingerprint, making the authentication...

www.elevenforum.com

I didn't find it difficult to get the hang of passkeys once I'd set the first one up. several years ago.

TairikuOkami · Jul 19, 2025

antspants said:
All it does, for me, is make me question the agenda with passkeys.

Indeed and Windows passkey can not be disabled, I can remove it, but Windows will just recreate it.
Passkey and password are on the same level, they are meant to make things easier, not safer.

Hackers no longer steal passwords, they steal sessions and once the device/browser is verified, passkey skips MFA entirely.

Like when Windows passkey is used, instead of MFA I get: Is that you? Yes. OK go ahead, it must be you, you said so. :eyeroll:

KevTech · Jul 19, 2025

cheaterslick said:
And this does, what?

Stops Firefox asking for passkeys.

Client Challenge

cheaterslick · Jul 19, 2025

KevTech said:
Stops Firefox asking for passkeys.

Client Challenge

Good to know since I'm not going to use any passkeys.

Marcus Vinicus · Jul 19, 2025

TairikuOkami said:
Like when Windows passkey is used, instead of MFA I get: Is that you? Yes. OK go ahead, it must be you, you said so.

View attachment 139766

On my devices I use MFA with my Microsoft Account. I also have passwordless account enabled. I use Windows Hello facial recognition on my desktop system and fingerprint on my phone (Android).

Pity the naysayers/afraid of change mob on the internet make this all sound harder and scarier than it really is.

How to use two-step verification with your Microsoft account | Microsoft Support

Get answers to some basic questions about what two-step verification is, and how to set it up and use it to help keep your Microsoft account more secure.

support.microsoft.com

TairikuOkami · Jul 20, 2025

Marcus Vinicus said:
On my devices I use MFA with my Microsoft Account.

If you use passkey, MFA is ignored.

Marcus Vinicus said:
I also have passwordless account enabled.

In the past few years, passwordless users had 3 incidents where they could not login for hours, password users could.

Marcus Vinicus said:
Pity the naysayers/afraid of change mob on the internet make this all sound harder and scarier than it really is.

That is the problem, it is not harder, it is easier, you verify a device and that is it, if someone steals it, you are done for.
I would prefer to use MFA EVERY SINGLE TIME, but MS does not allow it, it forces an insecure passkey on me.

I WANT to sing in using MFA, I do not give a

that MS thinks that it is bothersome, I prefer security over a convenience.

This is what I consider to be a passwordless login, not a silly Windows Hello for noobs.

Marcus Vinicus · Jul 20, 2025

TairikuOkami said:
If you use passkey, MFA is ignored.

In the past few years, passwordless users had 3 incidents where they could not login for hours, password users could.

That is the problem, it is not harder, it is easier, you verify a device and that is it, if someone steals it, you are done for.
I would prefer to use MFA EVERY SINGLE TIME, but MS does not allow it, it forces an insecure passkey on me.

View attachment 139884

I WANT to sing in using MFA, I do not give a that MS thinks that it is bothersome, I prefer security over a convenience.

This is what I consider to be a passwordless login, not a silly Windows Hello for noobs.

View attachment 139885

That is one incoherent rambling post. For starters you say without proof that users had incidents where they couldn't login. Well how many users like me have no issues with passkeys? You conveniently left that part out.

EDIT

I looked this up on multiple sources online on passkey adoption. Amazon has 175 million users with passkeys, Google has a 63.8% adoption rate (800 million users). That alone is nearly 1 billion users. Worldwide 15 billion users of passkey and we are told on this thread that 3 have had issues.

Passkeys reach 15 billion accounts but fall short of expectations so far

Andrew Shikiar, CEO and Executive Director of the FIDO Alliance has been a vocal advocate for passkeys. PC Mag notes that Shikiar didn't mince words about the...

www.techspot.com

RazorKat83 · Jul 20, 2025

glasskuter said:
There is no way I have found to stop EBAY from prompting you to set up a passkey when you log in. Every time you login to EBAY it will keep asking you to set up a passkey so you have to select "not this time", then login with your password. Lots of folks complaining about the fact that EBAY does not give the user an option to stop the prompts.

If you have already set up a passkey for EBAY but do not want to use it, you can clear all passkeys by clicking arrow to the left of your name in upper left corner of EBAY page, select account settings. Select personal information. Then click sign-in and security. Under Passkeys click "remove all passkeys".
For any other site that one has set up a passkey, such as Amazon, you can go into your account settings for that site and delete the passkey as well.

I don't have that issue, BUT I also have 2FA (Authenticator App) set up.

cheaterslick · Jul 20, 2025

I'm not using my phone for this. I shouldn't have to have two devices to log in with when one device, the one I'm logging into, was quite fine to do with in the past and less complicated.

I'ved used MS's 2FA application app before for work and it's a POS. Half the time it wouldn't work or send me a code. Then I had to call the help desk to guide me through and get a verbal temp passcode to log in. Even they considered it a piece of junk and nowhere near as reliable as say, RSA tokens.

So now I just set it up to get a one-time amazon passcode through my home email address (that expires after 10 minutes) and then enter it from there.

~

Now I hear this bullsh*t

New Microsoft 2FA Bypass Attack Warning—Dangerous And Sneaky, Act Now

New Microsoft 2FA Bypass Attack Warning—Dangerous And Sneaky, Act Now

A new threat called Sneaky 2FA targets Microsoft 365 account users and is invisible to many security protections—what you need to know.

www.forbes.com

Major Microsoft Multifactor Authentication Vulnerability Revealed -- Redmondmag.com

A vulnerability in Microsoft’s multifactor authentication (MFA) system has been uncovered by cybersecurity firm Oasis Security, allowing attackers to bypass security measures and access sensitive data across services including Outlook, OneDrive, Teams and Azure.

redmondmag.com

Hackers are using this sneaky exploit to bypass Microsoft's multi-factor authentication - ZDNET

Attackers guessed the password of a dormant account and were able to apply their own MFA to it - providing access to the victim's network.

www.zdnet.com

Just another avenue of attack created where one didn't exist before.

eBay prompting for passkey now?

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

aka Mama Glass

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Like a rolling drone.

My Computers My Computers

At a glance

At a glance

Semper paratus

My Computers My Computers

At a glance

At a glance

Microsoft 365 Basic

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Semper paratus

My Computers My Computers

At a glance

At a glance

Microsoft 365 Basic

My Computer My Computer

At a glance

Semper paratus

My Computers My Computers

At a glance

At a glance

Arklahoma Storm Spotter

My Computers My Computers

At a glance

At a glance

Well-known member

New Microsoft 2FA Bypass Attack Warning—Dangerous And Sneaky, Act Now A new threat called Sneaky 2FA targets Microsoft 365 account users and is invisible to many security protections—what you need to know. www.forbes.com

My Computers My Computers

At a glance

At a glance

Similar threads

My Computer

My Computer

My Computers

My Computer

My Computers

My Computer

My Computer

My Computers

My Computer

My Computers

My Computers

My Computers

My Computer

My Computer

My Computers

My Computers

My Computer

My Computers

My Computers

New Microsoft 2FA Bypass Attack Warning—Dangerous And Sneaky, Act Now

A new threat called Sneaky 2FA targets Microsoft 365 account users and is invisible to many security protections—what you need to know.

www.forbes.com

My Computers