ExpressVPN's ExpressKeys adds passkey support and secure sharing

Upgrade your security stack with passkey support to mitigate credential-based attacks.
30-Second TL;DR
What Changed
Introduced secure sharing functionality for credentials
Why It Matters
Improves security posture for developers managing multiple credentials across development environments.
What To Do Next
Audit your current credential management workflow and migrate legacy passwords to passkeys where supported.
Key Points
- •Introduced secure sharing functionality for credentials
- •Added native support for passkeys
- •Enhanced cross-device synchronization and management
Deep Insight
AI-generated analysis for this event — not the original article.
Enhanced Key Takeaways
- •ExpressKeys utilizes zero-knowledge encryption architecture, ensuring that ExpressVPN cannot access or decrypt user credentials stored in the vault.
- •The secure sharing feature implements a time-limited access mechanism, allowing users to revoke shared credentials remotely at any time.
- •Passkey integration leverages the FIDO2/WebAuthn standard, enabling biometric authentication (FaceID, TouchID) for passwordless logins across supported platforms.
- •The update includes a 'Security Health Score' dashboard that alerts users to weak, reused, or compromised passwords identified via dark web monitoring.
- •ExpressKeys is now bundled as a core component of the ExpressVPN subscription, moving away from standalone password manager pricing models.
Competitor Analysis
- ExpressKeys
- Native
- 1Password
- Native
- Bitwarden
- Native
- ExpressKeys
- Yes
- 1Password
- Yes
- Bitwarden
- Yes
- ExpressKeys
- Revocable Links
- 1Password
- Vault Sharing
- Bitwarden
- Organization/Collection
- ExpressKeys
- Bundled (VPN)
- 1Password
- Subscription
- Bitwarden
- Freemium/Paid
| Feature | ExpressKeys | 1Password | Bitwarden |
|---|---|---|---|
| Passkey Support | Native | Native | Native |
| Zero-Knowledge | Yes | Yes | Yes |
| Secure Sharing | Revocable Links | Vault Sharing | Organization/Collection |
| Pricing Model | Bundled (VPN) | Subscription | Freemium/Paid |
Technical Deep Dive
- Architecture: Utilizes AES-256-GCM encryption for data at rest and TLS 1.3 for data in transit.
- Passkey Implementation: Employs WebAuthn API to facilitate public-key cryptography, storing the private key in the device's Secure Enclave or TPM.
- Synchronization: Uses a proprietary encrypted sync protocol that ensures only the user's master key can decrypt the vault payload across devices.
- Sharing Mechanism: Implements a public-key exchange where the sender encrypts the shared item with the recipient's public key, ensuring end-to-end security.
Future ImplicationsAI analysis grounded in cited sources
Timeline
- 2023-05ExpressVPN launches ExpressKeys as a standalone password manager beta.
- 2024-02ExpressKeys exits beta and integrates into the main ExpressVPN application suite.
- 2025-09ExpressVPN announces roadmap for FIDO2-compliant passkey support.
- 2026-07Official rollout of secure sharing and native passkey support for all users.
Weekly AI Recap
Read this week's curated digest of top AI events →
AI-curated news aggregator. All content rights belong to original publishers.
Original source: ZDNet AI ↗
This is a summary, not the original. Read the source, or get the weekly briefing.
The weekly digest
One email a week. Unsubscribe anytime.
