Passage by 1Password (discontinued)

Status: discontinued (checked 2026-11-05)

Passage is no longer available. The Passage GitHub organization states that Passage "has been deprecated as of January 16, 2026," and its SDK repositories (server SDKs for Node.js, Go, Python, Ruby and PHP, the Passkey Flex SDKs, and the iOS, Android, Flutter and React Native SDKs) are archived with a notice that they are "no longer maintained as of January 16, 2026." The old product site, passage.1password.com, now redirects to the 1Password homepage, and 1Password's former Passage product page redirects there too. The organization README points existing users to a Passage migration guide at docs.passage.id for "how to transition to a new authentication solution"; that guide did not load when we checked on 2026-11-05, so we cannot say which provider, if any, 1Password recommends. Treat everything below as a record of what the product did, not a buying recommendation.

Overview

Passage was a passkey-first authentication product, acquired by 1Password in 2022 and operated as a subsidiary until its retirement. It focused narrowly on making passkeys and WebAuthn easy to adopt, in two forms: Passkey Complete, a standalone passwordless login service, and Passkey Flex, which added passkeys to an existing authentication flow. It was a specialist passwordless layer rather than a full CIAM platform.

What it was good at

Passkeys were the entire focus: the WebAuthn experience was polished, with clean SDKs and hosted UI that abstracted the ceremony complexity (see the add passkeys recipe for what that involves under the hood). For a greenfield consumer app that wanted passkeys as the primary method, it was a fast path.

Where it fell short

The narrow focus limited it: broad protocol federation, enterprise SSO, deep authorization and governance were never the point. The larger lesson is the one its retirement teaches. A single-purpose authentication layer owned by a company whose core business is something else carries roadmap risk, and in this case the product was shut down. Check how a replacement vendor makes money before you put it in your login path.

Pricing

No longer sold. While it was available, Passage was usage-based with a free tier.

If you used Passage

Plan the move now: the SDKs get no security fixes after 16 January 2026. Passkeys are bound to the relying party ID (your domain), not to Passage, so passkeys registered against your own domain can in principle keep working with a new WebAuthn server if you migrate the stored credential public keys; confirm what user and credential data you can export. Replacements by situation:

• Keep your existing IdP and add passkeys (the Passkey Flex pattern): Corbado or Authsignal.
• A full platform with passkeys built in (the Passkey Complete pattern): Stytch, Descope or Hanko, which is open source.

Bottom line

Discontinued on 16 January 2026. Do not start a new project on Passage; existing users should migrate to a maintained WebAuthn implementation.