Password manager makers design secure way to transfer passwords

passkeys

Makers of password managers are designing a new and secure way to transfer passwords between different password managers.

The FIDO Alliance has developed a concept that allows passwords to be securely transferred to other password managers. This will give users the freedom to safely switch to another password manager. The specifications for this are provisionally available in draft form. Users can already review them and provide feedback. The new concept is supported by companies such as 1Password, Apple, Google Microsoft and more.

Transferring passwords

Saving passwords in password managers has become a popular way to easily and quickly log into a page. Consequently, there are several password managers that users can choose from. Still, if you are not satisfied with your chosen password manager, it is not so easy and safe to switch to another one for the time being.

read also

Password manager makers design secure way to transfer passwords

To still give users the freedom to transfer their passwords in a secure manner, the FIDO Alliance created a draft of a new set of specifications. The “Credential Provider Special Interest Group” of the FIDO Alliance worked out two specifications, the Credential Exchange Protocol (CXP) and Credential Exchange Format (CXF). These would allow users to easily and securely move their login credentials to another password manager.

Concept

The FIDO Alliance’s “Credential Provider Special Interest Group” is represented by 1Password, Apple, Bitwarden, Google, Microsoft, Okta and more. Companies such as 1Password and Dashlane have already indicated they will support these specifications.

“It is critical that users can choose the login data management platform they prefer and switch login data providers securely and without hassle. Until now, there has been no standard for moving login data securely, and often moving passwords or other login data was done in public,” the FIDO Alliance said in its announcement.

Currently, it is only a draft. Users can view it and submit comments on the Alliance’s GitHub repo, but it has not yet been adopted by password managers.