Android users can now move passwords and passkeys between managers without risky file exports
Android users can now transfer passwords and passkeys between password managers via a new procedure managed by the operating system. The feature already supports most major password managers on Android 8 or later, with more to follow. Read Entire Article
Google has launched a new feature for Android devices that allows users to seamlessly transfer passwords and passkeys between different password managers without the need for potentially risky file exports. This update, available on Android 8 and later, streamlines the process of switching between security tools while mitigating a key vulnerability.
To initiate the transfer, users must first download their chosen password manager. The operating system will then automatically identify any other installed password managers that support the transfer. Upon tapping "Continue," users can review the data being moved before granting permission to complete the transfer.
The primary advantage of this feature is that it eliminates the requirement for downloading unencrypted text files, which can be intercepted during the transfer process. Additionally, the new method automatically handles the reassignment of passkeys, a cumbersome task when done manually.
Currently, the feature supports Google Password Manager, 1Password, Bitwarden, and Dashlane. More password managers are anticipated to integrate support in the near future. Password managers are widely regarded as the most secure approach to generating robust, unique passwords, yet many users remain resistant to their adoption. In fact, "123456" and "password" were among the most commonly used passwords as recently as last year.
Despite their security benefits, password managers are not entirely immune to vulnerabilities. Researchers recently discovered weaknesses in Bitwarden, LastPass, and Dashlane, while Dashlane faced a brute-force attack in June that resulted in the theft of subscriber information. Additionally, passkeys, which offer enhanced security by tying authentication to specific devices via PINs and biometrics, are not entirely foolproof.
In August, researchers disclosed a technique for extracting passkeys from Google Chrome's memory, and they can also be compromised during browser sessions.
Written by urgent.news from TechSpot's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
