Apple Tackles Significant Passkey Problems in iOS 26 Update
Apple’s forthcoming OS updates are poised to unveil a much-anticipated functionality designed to improve the usability of passkeys across various platforms and applications. This innovative feature will enable users to effortlessly and securely export and import passkeys, tackling a major limitation that has impeded the uptake of this security solution.
Traditionally, passkeys generated on Apple devices such as Macs, iPhones, and iPads were restricted to the Apple ecosystem. Although they could sync between iCloud-connected devices, moving them to other platforms like Windows or Android, or to third-party credential managers, was not possible. This limitation sparked worries about vendor lock-in, as users faced challenges in accessing their passkeys if they changed devices or lost connection to their Apple hardware.
The issue of portability is not exclusive to Apple; it has been a common challenge within the tech industry. The FIDO Alliance, which comprises key stakeholders like Google, Microsoft, and various password management services, has been striving to create secure methods for diverse platforms and applications to interact while maintaining the security that passkeys offer.
With the backing of the FIDO Alliance, Apple is now implementing native support for passkey import and export. This functionality will be part of the upcoming iOS 26, macOS Tahoe 26, iPadOS 26, and visionOS 26 updates. Notably, this new system will not only ease the transfer of passkeys but will also permit the secure movement of passwords and verification codes.
A major enhancement in this feature is the transfer method. In contrast to conventional password exports that frequently involve unencrypted files, the new approach aims to be end-to-end encrypted. Transfers will take place directly between credential manager apps or from the system keychain to an application, needing local authentication, such as Face ID or Touch ID, to kick off the process. This method mitigates the risks associated with keeping sensitive data in export files.
Apple’s demonstration highlighted that this feature enables users by giving them increased control over their data and the option to select their preferred credential manager. This signifies a significant transformation in Apple’s strategy, moving away from the closely integrated Keychain ecosystem that has defined its services.
The launch of this feature later this year is anticipated to ease concerns about ecosystem lock-in, motivating more users to embrace passkeys as a secure alternative to conventional passwords. For those curious about the technical details, comprehensive information is available in Apple’s “What’s new in passkeys” session on the Apple Developer website.
Read More