ExpressVPN for Android ditches the password hassle with new passkey and token logins

ExpressVPN recently rolled out three new login options for its Android app, aiming to simplify the process and eliminate the need for cumbersome activation codes. Users can now select from an email code, a login token, or a passkey to access their accounts.

The email code method involves entering the linked email address, which triggers a verification code to be sent to the user's inbox. This option remains straightforward and familiar for many users.

The login token option represents a more significant change. Users can generate a token from the ExpressVPN+ web portal setup page or scan a QR code provided within the app. Unlike the outdated, never-expiring activation codes, each token is unique and valid for a limited time. This ensures enhanced security and reduced vulnerability to unauthorized access.

The third option, the passkey, is an even more advanced method. Users who set up a passkey during the initial Android account creation can enter their email address and follow the on-screen instructions to authenticate. Passkeys, adhering to the FIDO2/WebAuthn standard, offer superior security and convenience, as they can be easily accessed across devices through a password manager or a hardware security key.

While email and password login options will be retained for now, ExpressVPN is actively phasing out the activation codes. They are the first to be replaced by the new methods. The company encourages users to store passkeys in its password manager, ExpressKeys, ensuring access across iOS, Android, Mac, and web browsers.

Overall, the new login options for ExpressVPN on Android enhance security, reduce the hassle of remembering complex passwords, and streamline the process for users.