ExpressVPN has announced a major update to its standalone ExpressKeys password manager, adding passkey support, secure credential sharing, and direct vault imports.
Alongside the release, the company published a new independent security assessment by Cure53, which found no severe vulnerabilities in the application after reviewing its architecture and mobile apps.
ExpressVPN, which is best known for its commercial VPN service (see our ExpressVPN review), launched ExpressKeys as a standalone password manager earlier this year. The application stores passwords, payment cards, secure notes, passkeys, and two-factor authentication codes across mobile devices and browsers for eligible subscribers.
Passkeys land on ExpressKeys
Among the most significant additions is support for passkeys, allowing users to generate, store, and authenticate with FIDO-compatible credentials instead of traditional passwords. As more online services adopt passkeys, password managers are increasingly adding support to help users transition away from reusable passwords that remain vulnerable to phishing and credential stuffing attacks.
The update also introduces secure sharing for individual vault items. Instead of sending passwords or payment information via messaging apps or email, users can generate links that expire after a configurable period, optionally require email verification, or become invalid after a single view. Access to shared items can also be revoked from within the application.
