Google finally lets you escape its passkey cage on android
For months, Android users have been locked into Google's Password Manager when it came to passkeys—a frustrating limitation that Apple users sidestepped with ease. Now, it appears Google is quietly testing a solution, potentially liberating users from this walled garden and finally delivering on the promise of true passkey portability.
The long-awaited export and import options
The change, spotted by Android Authority, involves a subtle but significant upgrade to Google Password Manager's settings. The familiar “Import passwords” and “Export passwords” options are being revamped to include passkeys. Users will soon be able to select a compatible password manager—Bitwarden was confirmed during testing—and seamlessly transfer their stored credentials without the tedious process of starting from scratch. This is a monumental shift, especially considering the initial hype surrounding passkeys and their supposed ability to simplify logins.
The Technology underpinning this newfound flexibility is the Credential Exchange Protocol (CXP), a standard championed by the FIDO Alliance. CXP facilitates the secure transfer of passkeys between apps and services, a capability that was technically feasible for some time but remained unrealized for Android users until now. The fact that heavy hitters like Google, Apple, Samsung, and Bitwarden are backing CXP suggests widespread adoption is on the horizon.
What's truly remarkable is Apple's head start. Last year, iOS 26 and macOS 26 already shipped with this very functionality, allowing iPhone users to effortlessly move their passkeys to alternative managers. Android users, meanwhile, were essentially tethered to Google's ecosystem, forced to delete passkeys and rebuild them on new platforms if they wanted to escape.
This isn't just about convenience; it's about ownership. You don't truly own a digital credential if you're beholden to a single provider. The initial promise of passkeys was freedom from password-related headaches, not a new form of vendor lock-in. Google's belated arrival to this party underscores a critical point: even the champions of open platforms can fall prey to the temptation of proprietary ecosystems.
While Google hasn't officially announced a timeline for the public rollout, the fact that this feature is already being tested on live devices suggests it's closer than many realize. If and when it arrives, it will be a significant step towards realizing the full potential of passkeys and finally delivering on the promise of a truly portable and user-centric login experience. The era of password managers as gatekeepers may finally be drawing to a close.