Credential Manager Archives

Tech Optimizer

July 15, 2026

Hundreds of GitHub repos found posing as real software to push malware

Cybersecurity firm ArcticWolf has identified 292 malicious GitHub repositories that impersonate legitimate software tools, part of a campaign to deliver a new variant of the BoryptGrab infostealer. This malware can extract sensitive information from 19 web browsers, 32 cryptocurrency wallets, messaging applications like Telegram and Discord, gaming platforms such as Steam, and Windows Credential Manager. It can also exfiltrate files from users' Desktop and Documents folders and capture screenshots. This variant bypasses Chrome’s App-Bound Encryption using direct code injection and does not include an anti-analysis layer or conceal itself, aiming to harvest data quickly without persistence. The malicious activity began in late June, with most repositories removed from GitHub, though several dozen remain active. GitHub's status as a key platform in the open-source community makes it a target for cybercriminals, emphasizing the need for developers to thoroughly vet code before integration.

Winsage

June 10, 2026

Proton releases Proton Drive CLI for Windows, Mac, and Linux

Proton has released a new command-line interface (CLI) for Proton Drive, allowing users to manage encrypted files from a terminal on Windows, macOS, and Linux. The CLI includes features such as authentication via browser, uploading files while skipping existing ones, checking sharing status, and inviting collaborators to shared folders. Future updates will add capabilities for managing photos, sharing files through public links, creating custom albums, and switching between accounts. Installation on macOS and Linux involves downloading a pre-built binary or building from source. The release follows a significant performance upgrade of Proton Drive, which is now three times faster due to a unified Drive SDK that enhances cryptographic task execution and reduces battery drain on mobile devices.

AppWizard

April 24, 2026

Google Adds Verified Email Feature to Simplify Android App Logins

Google has introduced a verified email feature for Android applications, accessible through the Credential Manager API. This feature allows apps to retrieve a user's verified email directly from their device, improving the login and account creation processes by eliminating the need for one-time passwords (OTPs) and email verification links. Users receive a system-level prompt to share their verified email with a simple tap, enhancing the user experience by reducing interruptions. The feature also benefits developers by simplifying verification systems and potentially decreasing user drop-off rates during registration. Currently, it supports Google accounts, with plans to include other identity providers in the future. Google advises developers to continue using traditional verification methods for non-Google accounts to ensure compatibility.

AppWizard

April 24, 2026

Google rolls out verified email feature for Android apps, removing need for OTPs

Google has introduced a verified email feature for Android applications via its Credential Manager API, allowing users to access their verified email addresses directly from their devices without traditional verification steps like OTPs or email links. Users receive a system-level prompt to share their verified email with a single tap, improving the user experience by eliminating the need to switch between apps. This feature simplifies the onboarding process for developers, reducing user drop-offs during registration and potentially improving conversion rates. Currently, it supports consumer Google Accounts, with plans for broader adoption pending support from other credential issuers. The system is intended for various use cases, including account creation, re-authentication, and recovery, while maintaining existing verification methods for non-Google accounts. This initiative is part of Google's effort to enhance authentication integration into the operating system and reduce reliance on passwords and multi-step verification.

AppWizard

April 24, 2026

Google Verified Email delivers powerful boost to Android app signups

Google Verified Email is a feature that streamlines the email confirmation process on Android devices by eliminating the need for one-time passwords (OTPs) or link tapping. It uses Android’s Credential Manager to store a cryptographically verified email credential on the device. When a user interacts with an email field or a sign-up button, a prompt requests permission to share the verified email with the app, allowing for instant confirmation without leaving the screen. This feature currently supports consumer Google Accounts on devices running Android 9 or later with updated Google Play services. Apps cannot access user information without explicit consent, and the feature can also be used for account recovery and profile modifications. Developers can use the Credential Manager API, which is issuer-agnostic, but Google’s credential specifically verifies only the email address. Despite its benefits, Google recommends maintaining backup options like manual email entry or traditional OTPs for situations where no suitable credential is available.

AppWizard

April 23, 2026

Goodbye, OTPs and magic links: Signing up for new Android apps just got a lot easier

Google has introduced a Verified Email feature for Android applications that simplifies the sign-up process by eliminating the need for magic links and one-time PINs (OTPs). This feature allows users to register for apps using a "cryptographically verified email credential" sourced from their Google account, which is securely stored on their device. It enhances security by enabling app developers to prompt users to create a passkey during registration. The Verified Email feature can also be used for account recovery and re-authentication for sensitive actions. However, it is currently limited to consumer Gmail accounts, and users with Workspace or managed accounts must still use traditional verification methods. Additionally, Google accounts created with non-Google email addresses may require extra verification steps from app developers. The feature is accessible on devices running Android 9 or newer and Google Play Services version 25.49.xx or later.

Winsage

November 17, 2025

Windows 11 users just got a more convenient way to store passkeys – here’s how it works

The technology behind passkeys involves cryptographic keys and standards like FIDO2 and WebAuthn, but users can enhance their security by creating passkeys whenever offered by websites or apps, using face recognition, fingerprints, or PINs. Users can accumulate multiple passkeys for easier sign-in across services. 1Password is set to integrate a new native passkeys plugin API with Windows 11, allowing users to manage passkeys through 1Password while using Windows Hello for authentication. This integration requires the latest version of Windows 11 and the MSIX version of the 1Password app. Users can enable the passkey feature in 1Password and designate it as the system authenticator in Windows settings. Other password managers may also adopt this integration, and Windows is introducing its own passkey sync mechanism through the Microsoft Password Manager in Edge. Passkeys do not replace existing credentials but serve as a secure alternative to usernames and passwords, with some services offering fully passwordless options.

Winsage

November 12, 2025

Windows just got native passkey support for one of my favorite password managers

Microsoft is enhancing Windows 11 with native support for passkeys and integrating password managers 1Password and Bitwarden. This update, which aims to improve security and user access, will be fully available with the Windows November 2025 security update. Users can create and save passkeys directly within Windows using the Microsoft Password Manager, and both 1Password and Bitwarden can integrate seamlessly into the Windows environment. The new capabilities allow users to save, manage, and use passkeys across browsers and native apps, with authentication using Windows Hello. Bitwarden has expressed enthusiasm for the collaboration with Microsoft, emphasizing the secure management of credentials on Windows.

Winsage

November 11, 2025

1Password can now save passkeys directly in Windows 11

A new Windows API allows third-party applications to manage passkeys more effectively, with 1Password being the first password manager to adopt this innovation. The integration enables 1Password to act as the credential manager on Windows 11, allowing users to create and manage passkeys easily while using Windows Hello for authentication. This feature is available to anyone running the latest version of Windows 11 and the newly released MSIX version of the 1Password app. Users can enable the passkey feature through the 1Password application or manually in Windows settings. Once configured, Windows will use the selected credential manager instead of its default settings. Other password managers like Bitwarden and Dashlane may follow with similar support. Passkeys serve as a convenient alternative to traditional username and password combinations but do not replace existing credentials.

Winsage

October 6, 2025

5 hidden features in Windows you probably didn’t know about

- ClickLock allows users to mimic a sustained mouse click by holding down the mouse button for about a second, enabling actions like text highlighting without continuous pressure. - Windows 11 includes screen savers that can be activated after a period of inactivity, with options like 3D Text, Bubbles, Mystify, Photos, and Ribbons. - The "God Mode Folder" provides a centralized view of various Windows settings and Control Panel utilities within File Explorer, created by renaming a folder to "GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}". - Users can generate a detailed battery report by opening Command Prompt as an administrator and entering the command "powercfg /batteryreport," which saves the report in the System32 folder. - File History allows users to maintain a continuously synchronized backup of their libraries by connecting an external or network drive, automating the backup process and enabling restoration of previous file versions.