For a long time, Android users who wanted to switch password managers often had to face a cumbersome and risky migration process. In the past, moving account passwords between different services usually required exporting the data as an unencrypted text file and then importing it into the new password management tool. This not only involved complicated steps but also put sensitive information at risk of exposure. As for passkeys, which have become increasingly widespread in recent years, the lack of a cross-platform migration mechanism often forces users to set them up again, reducing their willingness to switch.

Want to switch password managers? A new Android feature makes the process easier.
To solve these problems, Google announced the launch of a new credential migration experience on Android, allowing users to securely transfer passwords and passkeys directly between different password managers without the intermediate steps of downloading, storing, or uploading files, greatly improving convenience and security. According to Google’s instructionsThe biggest change in the new mechanism is that it eliminates the traditional file export step. Previously, password data could remain in an unprotected form for extended periods on devices or in cloud storage during transfer, increasing the risk of exposure. The new system uses Android to directly coordinate data exchange between different password managers, allowing credentials to be transferred in a more secure environment and preventing important information from being exposed.

The usage process has also been greatly simplified. After users install a new password manager, they only need to select “Import from another service” or a similar option, and the system will take over the subsequent process. Android will automatically detect password management tools already installed on the device that support this feature and provide a list of data sources that can be migrated. Next, users will be redirected to the password manager they currently use, and after confirming the data contents, they authorize the transfer. Once approval is completed, passwords and passkeys can be transferred to the new service within just a few seconds.

Several mainstream password management services now support this technology, including Google Password Manager, 1Password, Bitwarden, and Dashlane. Among them, Dashlane says the feature can be used as long as the device runs Android 10 or later and is updated to the latest Google Play services; Bitwarden requires Android 14 or later and a newer version of Play services.

The importance of this update lies not only in improving the user experience but also in helping drive the adoption of passkeys. Compared with traditional passwords, Passkey uses public-key cryptography, which can effectively reduce the risk of account compromise and phishing attacks, and is regarded as an important direction for the future of identity authentication. However, many users have previously had concerns about creating passkeys, with one key reason being the worry that their data would be tied to a specific platform or service and difficult to transfer in the future.

The new Credential Exchange Protocol (CXP) was created precisely to address this pain point. When passkeys can be moved as freely as passwords, users can more confidently choose the password management tool that meets their needs without worrying about excessively high switching costs later. This not only helps boost market competition but also encourages more people to adopt more secure authentication methods. Bitwarden revealed that the number of passkeys created this summer hit a record high, growing more than fivefold compared with early 2024; nearly half of those passkeys were created in the past three months, showing that market acceptance is rising rapidly.

Google also said that more partners will join the support effort in the future. As migrating passwords and passkeys becomes simpler and more secure, the reason people once had for putting off switching password managers out of concern that the transition process would be a hassle may no longer hold. For Android users who value account security and user experience, this update is undoubtedly a major step forward.
Source: KOCPC Chinese