For a few years, passkeys felt like a hotel room you could enter but not really leave. Great when everything worked. Awkward the day you switched phones, browsers, or password managers and discovered your shiny credentials were stuck behind a brand wall.
That is starting to change. Several mainstream password managers now treat export and transfer as something you can do on a Tuesday without calling a specialist. The pitch is quiet on purpose: fewer stranded credentials, fewer “just reset everything” weekends, and a little less fear that choosing a vault today locks you into it forever.
Security people still argue about the right transport format. Users mostly care whether grandma can move house without losing the keys to her bank.
- Prefer managers that document restore paths for a new phone in plain language.
- Test a small export on a secondary account before migrating your whole life.
- Keep a short written recovery plan offline — not only in the vault itself.
- Watch for vendors that market “sync” but dodge the word “export.”
Portability will not kill phishing by itself. It does remove one excuse people used to delay leaving passwords behind. That alone is worth the boring engineering.
Seen up close, the pattern is less about breakthrough theatre and more about quieter competence: fewer surprises, clearer owners, and tools that survive contact with Tuesday afternoon.