passkey Archives

AppWizard

September 14, 2026

Android Now Moves Passkeys Directly Between Password Managers

Android users can now transfer passwords and passkeys between supported password-manager applications without using export files. The transfer process starts in the receiving app, where Android identifies other installed password managers, allowing users to select and authorize specific data for transfer. This new functionality supports both passkeys and conventional passwords, taking only a few seconds to complete. Prominent password managers like Google Password Manager, 1Password, Bitwarden, and Dashlane support this feature, which is available on devices running Android 8 or later. The transfer mechanism maintains the security model of passkeys during authentication while facilitating the exchange between trusted managers. Recent research has identified potential vulnerabilities in synced Google passkeys, emphasizing the need for strong device security measures.

AppWizard

September 12, 2026

Android Users Can Now Share Their Passkeys In Just A Few Steps

Ditching passwords for passkeys has become a more secure option, but these keys are often tied to a single device, posing challenges for cross-platform usage. Google has improved the process for Android users to share and transfer passkeys, allowing easier transitions between password management tools like 1Password and Bitwarden. Previously, transferring passkeys required creating new keys, but now users can move both passwords and passkeys through a secure mechanism within Android. This feature supports popular tools such as 1Password, Bitwarden, Google Password Manager, and Dashlane. Users can transfer passkeys to preferred mobile password managers, facilitating access across multiple devices. The transfer feature is valuable for migrating passkeys between applications, enhancing user experience and security as more individuals adopt passkeys.

AppWizard

September 11, 2026

Android can now transfer passwords between apps

Google has introduced a password manager switching feature for Android that allows users to transfer passwords and passkeys to a new application without downloading CSV files. This feature is available on devices running Android 8 or later and supports various password managers, including Bitwarden, 1Password, and Dashlane. Users can initiate the transfer by opening their new password manager app, which will automatically detect installed password managers on the device. The process allows users to review and approve the information being migrated with minimal effort, enhancing user experience and security by avoiding the risks associated with CSV file transfers.

AppWizard

July 27, 2026

I couldn’t sign into the PlayStation App on Android, but I found an easy way to get around Sony’s finicky 2FA

Sony has faced criticism for discontinuing physical game discs and issues with the PlayStation app, particularly regarding two-factor authentication (2FA). Many users have reported difficulties logging into their accounts when they do not receive verification text messages. This problem has affected access to PS4s and PS5s. Users can recover their accounts by following these steps: open the PlayStation app, sign in with their email, select "Trouble Signing In?", choose "Recover Your Account", and reset their password. They can then set up a passkey, which disables 2FA, allowing them to log in without needing the verification code. Previously, users could use 2FA on consoles if they did not receive an SMS code, but this option is no longer available, making backup codes essential.

Winsage

June 5, 2026

Microsoft Edge won’t let you access its password manager without Windows Hello

Microsoft Edge has removed the use of master passwords for its password manager on Windows, transitioning to Windows Hello for authentication in version 145 of the browser. This update prioritizes security by allowing access through biometric options or a PIN, rather than traditional passwords. The rollout of this update began on June 4, 2026.

AppWizard

May 19, 2026

Google Unwraps Plans to Put AI to Work for Android, Web Developers

At the recent Google I/O event, Google introduced a suite of AI tools for Android and Chrome applications aimed at enhancing marketing and management for developers. In the Play Store, AI will assist in app discovery through Google’s Gemini and provide a Q&A interface for user inquiries. New AI-driven management tools for developers include creating app listings based on keyword insights, automating catalog management, analyzing payment issues, and offering retention incentives for users. Google also reduced Play Store charges for developers to a commission of 10% to 20%. For Android programmers, Google’s AI Studio offers coding assistance for specific app categories, while additional enhancements include a command-line interface guided by programming-assistant AIs and new marketing options. In Chrome, Google introduced a trial version of WebMCP for AI agents to connect with site APIs and expanded built-in AI tools for writing and debugging. New web-coding options are being tested to improve app-like interfaces and compatibility metrics. The “Immediate UI Mode” feature allows for a unified login interface to streamline passkey authentication.

Winsage

April 24, 2026

Microsoft to roll out Entra passkeys on Windows in late April

Microsoft will introduce passkey support for phishing-resistant passwordless authentication on Microsoft Entra-protected resources starting in late April, with broader availability expected by mid-June 2026. This feature will allow passwordless sign-in on unmanaged Windows devices and will support various device types, including corporate, personal, and shared options. Administrators can manage passkeys through Conditional Access and Authentication Methods policies. Users can create device-bound passkeys stored securely within the Windows Hello container, using methods like facial recognition, fingerprint scanning, or a PIN. The passkeys will adhere to FIDO2 standards and will be securely bound to individual devices, preventing transmission over the network to enhance security against phishing and malware attacks. Microsoft has also announced plans for mandatory multifactor authentication registration for Entra tenants by October 2024 and that all new accounts will be passwordless by default starting in May 2025.

Winsage

April 23, 2026

Engineering secure passkey sync in Microsoft Password Manager

Passkeys are a new form of authentication that replace traditional passwords, providing a phishing-resistant and streamlined sign-in process. Microsoft Password Manager allows users to save and synchronize passkeys across devices linked to their Microsoft accounts, enhancing accessibility. The architecture for passkey syncing includes confidential computing for sensitive operations, hardware-rooted key protection for encryption keys, tamper-evident recovery storage, and encrypted synchronization across devices. Sensitive passkey operations are executed in Azure's confidential computing environments, ensuring cryptographic materials are processed securely. The encryption keys are protected using Azure Managed HSM, with access governed by attestation-based mechanisms. Registration and recovery processes require user authentication and enforce security measures within confidential computing boundaries, including a lockout state after consecutive incorrect PIN attempts. The system aims to provide a secure and user-friendly experience as part of a transition to a passwordless future.

AppWizard

April 23, 2026

Goodbye, OTPs and magic links: Signing up for new Android apps just got a lot easier

Google has introduced a Verified Email feature for Android applications that simplifies the sign-up process by eliminating the need for magic links and one-time PINs (OTPs). This feature allows users to register for apps using a "cryptographically verified email credential" sourced from their Google account, which is securely stored on their device. It enhances security by enabling app developers to prompt users to create a passkey during registration. The Verified Email feature can also be used for account recovery and re-authentication for sensitive actions. However, it is currently limited to consumer Gmail accounts, and users with Workspace or managed accounts must still use traditional verification methods. Additionally, Google accounts created with non-Google email addresses may require extra verification steps from app developers. The feature is accessible on devices running Android 9 or newer and Google Play Services version 25.49.xx or later.

Winsage

March 12, 2026

After decades with Linux, I tried to use Windows 11 – and found 9 glaring issues

Jack Wallen transitioned from Linux to Windows 11 for a week and encountered several frustrations: 1. Creating a local account was cumbersome compared to Linux. 2. Google passkeys did not work without enabling the "Hello" service. 3. The Mailbird email client demanded payment after installation, locking him out of other applications. 4. The natural scrolling feature reverted to its default setting despite attempts to disable it. 5. Advertisements appeared within the Windows 11 interface. 6. The default save location for files was OneDrive, which he had not logged into. 7. Windows 11 used excessive resources, causing his laptop to run hot. 8. Virus and Threat Protection settings were not enabled by default. 9. The laptop screen failed to enter hibernation or turn off automatically, risking battery drain.