Android is rolling out a major improvement to password and passkey migration. The update adds a system-level transfer mechanism that lets users move their credentials between password manager apps without exposing them in unencrypted files. The new method means transferring both passwords and passkeys can now happen securely within Android itself.
Why the Old Way Was Risky
Previously, moving login information from one manager to another meant exporting everything into unencrypted text files stored locally on the device. Those files could be exposed or stolen before being imported into the new manager. Meanwhile, passkeys—passwordless login credentials—couldn’t be transferred at all, forcing users to manually recreate them across sites and apps, a tedious and error-prone process.
How Android’s Secure Transfer Works
The new flow begins when you install a second password manager. From that app, you can choose to import or “copy” existing passwords and passkeys. At that point, Android takes over: it recognizes other password manager apps already installed on the device and lets you pick which one to import from.
When you tap “Continue,” Android routes you through the old password manager so you can review and authorize the transfer of your credentials. Once you give permission, both passwords and passkeys are moved securely between the apps—usually in just a few seconds.
Supported Apps & Developer Access
At launch, several major password managers are compatible with the new system. Google Password Manager, 1Password, Bitwarden, and Dashlane support transferring credentials using Android’s new secure flow. Other apps can join by integrating with Android’s Credentials Transfer API.
This change extends Google’s wider efforts to phase out legacy practices that put users’ credential data at risk. It also acknowledges the growing adoption of passkeys—seen as more secure than traditional passwords—by making them easier to manage and move across platforms.
What to watch: Which password managers will adopt the API next? How widely Android’s new transfer flow rolls out—whether it’s limited to certain device or OS versions? And whether this will encourage more users to adopt passkeys, once credential management feels less cumbersome.
