SourceStalecollected in 19m

ExpressVPN's ExpressKeys adds passkey support and secure sharing

Read original on ZDNet AI
#security#password-manager#authentication

Upgrade your security stack with passkey support to mitigate credential-based attacks.

30-Second TL;DR

What Changed

Introduced secure sharing functionality for credentials

Why It Matters

Improves security posture for developers managing multiple credentials across development environments.

What To Do Next

Audit your current credential management workflow and migrate legacy passwords to passkeys where supported.

Who should care:Developers & AI Engineers

Key Points

  • •Introduced secure sharing functionality for credentials
  • •Added native support for passkeys
  • •Enhanced cross-device synchronization and management

Deep Insight

AI-generated analysis for this event — not the original article.

Enhanced Key Takeaways

  • •ExpressKeys utilizes zero-knowledge encryption architecture, ensuring that ExpressVPN cannot access or decrypt user credentials stored in the vault.
  • •The secure sharing feature implements a time-limited access mechanism, allowing users to revoke shared credentials remotely at any time.
  • •Passkey integration leverages the FIDO2/WebAuthn standard, enabling biometric authentication (FaceID, TouchID) for passwordless logins across supported platforms.
  • •The update includes a 'Security Health Score' dashboard that alerts users to weak, reused, or compromised passwords identified via dark web monitoring.
  • •ExpressKeys is now bundled as a core component of the ExpressVPN subscription, moving away from standalone password manager pricing models.

Competitor Analysis

Passkey Support
ExpressKeys
Native
1Password
Native
Bitwarden
Native
Zero-Knowledge
ExpressKeys
Yes
1Password
Yes
Bitwarden
Yes
Secure Sharing
ExpressKeys
Revocable Links
1Password
Vault Sharing
Bitwarden
Organization/Collection
Pricing Model
ExpressKeys
Bundled (VPN)
1Password
Subscription
Bitwarden
Freemium/Paid

Technical Deep Dive

  • Architecture: Utilizes AES-256-GCM encryption for data at rest and TLS 1.3 for data in transit.
  • Passkey Implementation: Employs WebAuthn API to facilitate public-key cryptography, storing the private key in the device's Secure Enclave or TPM.
  • Synchronization: Uses a proprietary encrypted sync protocol that ensures only the user's master key can decrypt the vault payload across devices.
  • Sharing Mechanism: Implements a public-key exchange where the sender encrypts the shared item with the recipient's public key, ensuring end-to-end security.

Future ImplicationsAI analysis grounded in cited sources

ExpressVPN will transition into a comprehensive 'Security Suite' provider.
By integrating password management and passkey support directly into the VPN subscription, the company is positioning itself as a holistic cybersecurity provider rather than a single-tool utility.
Market share for standalone password managers will decline.
The bundling of high-quality security tools like ExpressKeys into existing VPN subscriptions creates significant price pressure on dedicated password manager services.

Timeline

2023-05
ExpressVPN launches ExpressKeys as a standalone password manager beta.
2024-02
ExpressKeys exits beta and integrates into the main ExpressVPN application suite.
2025-09
ExpressVPN announces roadmap for FIDO2-compliant passkey support.
2026-07
Official rollout of secure sharing and native passkey support for all users.

Weekly AI Recap

Read this week's curated digest of top AI events →

AI-curated news aggregator. All content rights belong to original publishers.
Original source: ZDNet AI ↗

This is a summary, not the original. Read the source, or get the weekly briefing.

The weekly digest

One email a week. Unsubscribe anytime.