Particle.news

Hidden Passkey Transfer Tools Found in Google Password Manager for Android

The tools use an industry standard to let users move passkeys between apps without re-registering on every site.

Overview

  • Android Authority activated a hidden interface in Google Password Manager that enables importing and exporting passkeys and reported that it works.
  • Hands-on testing moved passkeys to Bitwarden, showing real cross-manager transfers rather than a placeholder screen.
  • Transfers rely on the FIDO Alliance’s Credential Exchange Protocol, which carries passkeys between apps through Google Play Services on Android.
  • A warning that says "Export blocked for your protection" appeared when a destination app did not meet security standards, indicating built-in safeguards.
  • The feature is not available to regular users and has no launch date, while Apple, Bitwarden, and 1Password already support similar CXP moves and Android managers like Samsung Pass could join once it rolls out.