unencrypted Archives

AppWizard

September 24, 2026

Russia’s state-backed messaging app Max can secretly change how it surveils individual users, researchers at InterSecLab find

The Max messenger, developed by VK, has significant user tracking capabilities. A report from InterSecLab revealed that: - Max's features can vary for individual users without app updates. - It lacks end-to-end encryption, allowing VK access to messages, even in "secret chats." - Each account can be configured to perform specific actions, such as decrypting messages on VK's servers and blocking messages if a VPN is detected. - Upon launching, Max reports the user’s network environment to VK, including their public IP address and mobile carrier. - The app uploads users’ entire address books unencrypted to VK's servers, accessing contacts of non-registered individuals. - A phone number query can reveal extensive user information without notification. - Max stops functioning if it detects a VPN, requiring users to disable it to send messages, although workarounds exist. - New users receive a curated list of recommended channels, primarily featuring state media and pro-government figures.

AppWizard

September 14, 2026

Android Now Moves Passkeys Directly Between Password Managers

Android users can now transfer passwords and passkeys between supported password-manager applications without using export files. The transfer process starts in the receiving app, where Android identifies other installed password managers, allowing users to select and authorize specific data for transfer. This new functionality supports both passkeys and conventional passwords, taking only a few seconds to complete. Prominent password managers like Google Password Manager, 1Password, Bitwarden, and Dashlane support this feature, which is available on devices running Android 8 or later. The transfer mechanism maintains the security model of passkeys during authentication while facilitating the exchange between trusted managers. Recent research has identified potential vulnerabilities in synced Google passkeys, emphasizing the need for strong device security measures.

AppWizard

September 12, 2026

Android Users Can Now Share Their Passkeys In Just A Few Steps

Ditching passwords for passkeys has become a more secure option, but these keys are often tied to a single device, posing challenges for cross-platform usage. Google has improved the process for Android users to share and transfer passkeys, allowing easier transitions between password management tools like 1Password and Bitwarden. Previously, transferring passkeys required creating new keys, but now users can move both passwords and passkeys through a secure mechanism within Android. This feature supports popular tools such as 1Password, Bitwarden, Google Password Manager, and Dashlane. Users can transfer passkeys to preferred mobile password managers, facilitating access across multiple devices. The transfer feature is valuable for migrating passkeys between applications, enhancing user experience and security as more individuals adopt passkeys.

AppWizard

September 12, 2026

Android can now securely migrate your logins between password managers

Google has developed a new login transfer process for Android that simplifies the transition between password managers. Users can initiate the transfer by locating the import option within the new app, with Google Password Manager's feature found near the top of the settings tab. The import functionality connects with the new migration system, while the export feature generates an unencrypted CSV file of passwords for use in other applications. This transfer capability is compatible with several popular password management applications, including Google Password Manager, 1Password, Bitwarden, and Dashlane.

AppWizard

September 11, 2026

Android can now move passwords and passkeys between password managers

Google has integrated a password manager transfer feature into the Android operating system, allowing users to move passwords and passkeys between compatible applications without exporting an unencrypted CSV file. This feature is available for devices running Android 8 and later, including users in the UAE. It supports popular password managers such as Google Password Manager, 1Password, Bitwarden, and Dashlane, with more providers expected to join. The transfer process involves selecting the import or copy option in the new password manager app, where Android identifies compatible managers and users authorize the transfer. This functionality operates through Google Play Services, requiring no separate Android version update.

AppWizard

September 10, 2026

New Android Feature Lets You Securely Switch Password Managers

Google has introduced a new system-level feature for Android that simplifies the transfer of passwords and passkeys between password managers. This feature allows users to transfer credentials with a few taps, eliminating the need for file downloads and reducing the risk of data exposure. Previously, migrating credentials involved exporting sensitive information into unencrypted CSV files, which posed security risks. The new mechanism operates at the operating system level, enabling direct communication between applications. Users can initiate transfers by selecting the option to import credentials from another provider, after which Android identifies existing password manager apps. The process requires user authentication and ensures that sensitive information is not stored in an unencrypted format. The feature supports several password management platforms, including Google Password Manager, 1Password, Bitwarden, and Dashlane.

AppWizard

September 10, 2026

Android can now securely migrate your logins between password managers

Google has developed a new login transfer process for password managers that operates on mobile devices, allowing users to migrate credentials seamlessly. To use this feature, users must have the relevant applications installed and their credentials synced. The import option can be found in the settings tab of the app being adopted, while the export function generates an unencrypted CSV file for importing into other applications. This migration feature is compatible with several popular password management tools, including Google Password Manager, 1Password, Bitwarden, and Dashlane.

AppWizard

September 10, 2026

Android makes switching password managers much easier

The process of transferring passwords and passkeys between supported applications on Android has been streamlined, allowing for direct transfers between compatible password managers without the need for exporting data to unencrypted files. Android's built-in password manager facilitates these transfers by automatically detecting compatible managers on the device. This new capability is available for devices running Android 10 or newer with the latest Play Services update, while Bitwarden users need Android 14 or later and Play Services version 26.21 or higher. The introduction of the Cross-Platform Transfer (CXP) feature enhances security and encourages the adoption of passkeys, which have seen a 500% increase in creation according to Bitwarden. Nearly half of all passkeys were generated in the past three months. Google plans to add more partners to this feature in the future.

AppWizard

September 10, 2026

Your passkeys can now move between password managers on Android

Google has introduced a new feature in Android that allows users to transfer passwords and passkeys directly between password managers without the need for file downloads. This method enhances security by eliminating the risks associated with unencrypted text files. Users can import or copy data from one password manager to another by selecting options within the new manager, which identifies installed password managers for transfer. Currently, the feature is supported by Google Password Manager, 1Password, Bitwarden Password Manager, and Dashlane, with plans for additional partners in the future. Details on supported Android versions and the level of protection during transfer are not specified. Users with unsupported password managers can still begin the transition using the export button.

AppWizard

August 18, 2026

The Truth About Android Antivirus Apps in 2026

Most Android users consider third-party antivirus apps unnecessary due to the robust built-in security features of modern Android smartphones. However, Android devices are still vulnerable to viruses, malware, and security breaches, with a 2025 Gen threat report indicating a tripling of malicious push notifications and an increase in spyware issues. Google Play Protect blocked 27 million malicious apps in 2025 and conducts scans to manage security. Android employs sandboxing, regular security updates, and an opt-in permissions system to protect users. Upcoming features include phone call spoofing protection and enhanced live threat detection capabilities. Social engineering tactics, such as phishing and fake tech support calls, pose significant risks that antivirus software cannot address. Connecting to open Wi-Fi networks can expose devices to risks, and malicious push notifications can mislead users. Third-party antivirus apps may be beneficial in high-risk scenarios, such as public Wi-Fi networks or when sideloading apps, providing an additional layer of protection.