Add preferred source1
Google has introduced a new Android feature that lets users migrate passwords and passkeys between password manager apps without exporting unencrypted CSV files. The system, available on Android 8.0 and later through Google Play Services, currently supports Google Password Manager, 1Password, Bitwarden, and Dashlane. Users initiate the transfer from the destination app, review the credentials being moved, and approve the migration on-device. The feature eliminates the risk of plaintext file interception and automates passkey transfer, which previously required manual reassignment. More password managers are expected to add support through the Credential Transfer API, though no timeline has been provided.
Key Elements
Switching between password managers on Android no longer requires exporting credentials to an unencrypted file. Google has rolled out a new operating system-level migration process that moves both passwords and passkeys directly between apps, closing a long-standing security gap that left users vulnerable to data interception.
The feature, announced Thursday, works on devices running Android 8.0 Oreo or later and is integrated through Google Play Services, meaning it does not require a system update. At launch, the migration system supports Google Password Manager, 1Password, Bitwarden, and Dashlane, with additional managers expected to add compatibility over time.
To initiate a transfer, users open the password manager they want to move into and select the import or copy option. Android then detects other installed managers on the device and displays which ones support the new transfer process. After confirming theauthorizing the move. The entire procedure happens on-device, with no intermediate files created
The elimination of CSV exports addresses a well-documented vulnerability. Previously, moving passwords between managers often involved downloading a plaintext spreadsheet that could be intercepted by malware or left behind in storage. Passkeys posed an even greater challenge: users typically had to reassign each one individually to the new manager. The new system handles passkey transfer automatically, preserving the cryptographic bindings without exposing sensitive material to servers.
Google designed the migration flow around the Credential Transfer API, which participating password manager developers have implemented in their Android apps. The import option in Google Password Manager, which is built into the operating system, sits near the top of the settings tab. For third-party apps, the location varies, but the underlying mechanism is the same: Android verifies the user’s identity and coordinates the handoff between the two applications.
| Supported Password Managers |
|---|
| Google Password Manager |
| 1Password |
| Bitwarden |
| Dashlane |
Note: Additional password managers are expected to add supporta timeline
The rollout comes as password managers face mounting scrutiny over their role in modern authentication. Security researchers widely recommend them as the most effective way to generate and store unique credentials, particularly given that weak passwords like “123456” and “password” remained among the most common choices as recently as last year. Yet the tools themselves are not immune to attack. In August, researchers demonstrated a method for extracting passkeys from Google Chrome’s memory, and passkeys can also be stolen alongside browser sessions.
Passkeys, which authenticate users through PINs and biometrics tied to specific devices, are generally considered more secure than traditional passwords because they do not transmit sensitive information to servers. However, their device-bound nature has historically made migration between ecosystems cumbersome. By automating passkey transfer alongside passwords, the new Android feature removes a significant friction point for users adopting the newer authentication standard.
For users whose preferred password manager is not yet on the supported list, the manual import path remains available, including the unencrypted CSV method that the new system is designed to replace. Google has indicated that more managers will join the program but has not specified which ones or when.
The feature’s reliance on Google Play Services means it reaches virtually every Google-certified Android device in active use. Play Services support currently extends back to Android 7.0 Nougat, giving the new migration capability an install base that spans nearly all operational hardware running Android 8 or above. This broad compatibility distinguishes the rollout from features that require newer Android versions, which often take years to reach meaningful adoption.
For enterprise users and individuals managing hundreds of credentials, the practical benefit is immediate: a full migration that previously required careful handling of a sensitive file and manual passkey reassignment can now be completed in a few taps, entirely within the Android environment.
Once added, BigGo Finance appears first in Google Search Top Stories, so you get the broadest, most up-to-the-minute, and most comprehensive global financial news first.
