Tuesday, May 26, 2026
Today's Edition

EveryNews

Stories that matter, signal over noise
Technologies

Your access keys will finally be yours: Google prepares passkeys export on Android

Google is adding passkey import and export functionality to its password manager for Android — and this is more than just a convenience feature, it's a response to the main argument skeptics have against abandoning passwords.

Tetiana Suchkova-Ladik

By Tetiana Suchkova-Ladik

May 18, 2026 · 2 min read

Your access keys will finally be yours: Google prepares passkeys export on Android
Інтерфейс Password Manager (Фото: Google)

Android Authority discovered a hidden interface in Google Password Manager: the company is preparing to support importing and exporting passkeys. The feature is not yet publicly enabled, but the presence of a finished UI indicates the development is in its final stage.

Why this matters right now

Passkeys have existed for several years, but their mass adoption has been hindered by one practical barrier: ecosystem lock-in. Buy a new smartphone — and the passkeys created in Google cannot be transferred to 1Password or Bitwarden without jumping through hoops. This gave passwords in CSV files an inconvenient advantage — at least they could be copied.

According to the FIDO Alliance, today over 12 billion online accounts already support passkey login. But without a portability standard, users were essentially leasing their credentials to a specific vendor.

Industry standard as a foundation

Google is not moving alone. The FIDO Alliance has developed two technical standards — Credential Exchange Format (CXF) and Credential Exchange Protocol (CXP) — that describe how to securely transfer passkeys between platforms with end-to-end encryption. Bitwarden, 1Password, and Dashlane have already announced support. Apple implemented a compatible mechanism in iOS 26 and macOS Tahoe 26, where transfer occurs directly between applications — without an intermediate CSV file on disk.

«Login via passkeys is 75% faster and 20% more successful than passwords combined with SMS codes».

FIDO Alliance

Before CXP/CXF appeared, the industry «standard» for password transfer was an unencrypted CSV file — an approach that security experts called primitive. The new specifications replace it with a direct encrypted channel between managers.

What Android users will actually get

  • Transfer of passkeys when switching to a new device without reconfiguring each service
  • Ability to migrate from Google Password Manager to a third-party manager (and vice versa) without losing keys
  • Backup of passkeys in encrypted format

Google has not yet announced a specific launch date — the hidden interface may appear in one of the upcoming service updates or alongside a future Android release.

If Google implements full CXP/CXF compatibility before the end of 2025, the password manager market will get its first truly competitive environment for passkeys: users will be able to choose a platform based on quality, rather than where they happened to create the first key. The question is whether Google will want to open this channel completely — or will leave technical limitations that make migration from Google more convenient than migration to competitors.

Related

Latest

Business

EU Against Google: Why the Latest Fine Could Change More Than Previous Ones

# European Regulators Target Google Again — This Time Over Digital Markets Act Violations. What's Behind the Accusations and Why It Matters Beyond the Corporation European regulators have renewed their scrutiny of Google, this time focusing on alleged violations of the Digital Markets Act. The charges underscore Brussels' increasingly aggressive stance on big tech monopolies and what officials say are anticompetitive practices. The accusations center on how Google leverages its dominance across multiple digital services — from search to advertising to mobile platforms — to disadvantage competitors. Regulators claim the company is using its market power in ways that stifle innovation and limit consumer choice. The case carries significance far beyond Google itself. It signals how the EU is attempting to enforce its landmark Digital Markets Act, legislation designed to curb the gatekeeping power of tech giants. A potential penalty could set precedent for how other large technology companies face similar scrutiny. For consumers and smaller tech firms, the outcome could reshape the digital landscape by creating more room for competition. For Google, fines and operational restrictions could fundamentally alter its business model in Europe, the world's most stringent regulatory market. The case also reflects a broader geopolitical divide, with the EU pursuing a regulatory approach that contrasts sharply with the lighter-touch oversight favored in the United States.

May 26, 2026