According to a post on the Google blog, Google has launched a new transfer system on Android which allows users to move their passwords and passkeys directly between different password managers without having to export their sensitive data to an unencrypted file.
This update resolves two longstanding issues: the previouws method left the credentials unprotected in a text file and passkeys had not been transferable before, meaning they had to be recreated manually. The feature is now available with Google Password Manager, 1Password, Bitwarden, and Dashlane.
The android system arranges the transfer between managers that are installed on the device and are compatible.
How Android’s Secure Password and Passkey Transfers Work
The process is intended to interfere as little as possible with the user. To use it, the user first goes into their new password manager and chooses the option to import or copy credentials from another provider, after which the app passes the task on to Android; this will then identify the password managers that are compatible and show the user where the data can be obtained.
The user is then asked to go back to their original password manager in order to choose, check over, and approve the transfer. After approval has been given, the passwords and passkeys are transferred between the apps in a few seconds, with no need for manual file handling.
This change gets rid of one of the major security problems associated with the previous process, since in that process the sensitive credentials remained unprotected on the device while it was being exported. Before, passkeys also could not be transferred, so users had to recreate them manually on different websites and apps.
Passkeys are more secure than passwords and are resistant to phishing, but their uptake has been hindered in part by users’ worries about vendor lock-in.
The new Credential Exchange Protocol (CXP) eliminates that obstacle. According to Bitwarden, the number of passkeys being created reached a peak this summer, amounting to more than 500 per cent when compared to early 2024, and nearly half of all passkeys have been created in the last three months alone.
Supported Password Managers and Compatibility Requirements
The feature is now available through Google Password Manager, 1Password, Bitwarden, and Dashlane, with additional partners expected in the future. The requirements differ according to the provider:
- Dashlane states that CXP is compatible with devices using Android 10 or a later version once they have received the most recent Play Services update.
- Bitwarden needs a version of Android that is 14 or later together with Play Services 26.21 or a later version.
- Begin the transfer using the new password manager and then approve it in the current one, as Android handles the handover between the installed password managers.
The direct transfer feature is now available for the four password managers mentioned, and Google has stated that more partners will be adding support.
Compatibility will depend on the version of Android and the update to Play Services, although this may differ from provider to provider. Google has not specified which of the additional managers will support the feature or when.
Thank you for being a Ghacks reader. The post Android Adds Direct Password and Passkey Transfer Between Password Managers appeared first on gHacks.
