Google enables secure passkey transfers between Android password managers
A new OS-level update removes the need for risky unencrypted export files when switching security tools.
Google has launched a secure transfer process within Android's Credential Manager that allows users to move passkeys directly between compatible password managers. This update addresses a critical security gap by removing the need for users to export sensitive credentials into unencrypted files.
The new functionality is delivered via Google Play Services version 26.21 and later. By handling the process at the OS level, Android enables apps to exchange data directly on-device. This eliminates the creation of external files that could be intercepted or leaked. Initial support for the feature includes Google Password Manager, 1Password, Bitwarden, and Dashlane.
The end of the CSV export
Traditionally, migrating passwords between different managers required exporting data into CSV files. Because these files are often unencrypted, they represent a significant security vulnerability if stored improperly or accessed by malicious software. Passkeys, which rely on public-key cryptography, presented an even greater challenge; their private keys are typically locked in secure hardware enclaves, making them impossible to export as simple text files.
Breaking vendor lock-in
This shift is pivotal for the broader adoption of a passwordless future. By standardizing how passkeys are exchanged, Google is effectively reducing "vendor lock-in," ensuring that users are not tethered to a single ecosystem simply because the cost of migrating their security credentials is too high. Users can now switch their preferred security tools without the risk of compromising their credentials or the tedious requirement of manually recreating every passkey for every account.
What to watch
As the feature rolls out, the primary focus will be on the expansion of the supported manager list. While major players like Bitwarden and 1Password are already integrated, the long-term success of the system depends on widespread adoption of these transfer standards across the industry. Users should ensure their Google Play Services are updated to version 26.21 or higher to access these capabilities.