ExpressKeys Adds Passkeys, Secure Sharing and a New Cure53 Audit

On July 2, 2026, ExpressVPN announced a major update to ExpressKeys, its standalone password manager. ExpressKeys runs as mobile apps and browser extensions. According to ExpressVPN, the update adds passkey support, secure sharing, direct imports, card scanning on iOS, and better account recovery. A new independent audit by Cure53 is part of the news too. Everything below is reported as stated by ExpressVPN and covered by outlets such as TechRadar.

If passkeys are new to you, start with what is a passkey.

What ExpressKeys added

ExpressVPN describes the update as bringing several features at once:

• Passkey support: generate, store, and manage passwordless credentials in the vault.
• Secure sharing: share logins, cards, and notes through controlled links.
• Direct imports via the FIDO Credential Exchange standard.
• Card scanning: the iOS app can scan physical bank cards with the camera.
• Account recovery improvements.

Read the list as what ExpressVPN says the update brings, not as our own testing.

Passkeys come to the vault

The headline change is passkey support. According to ExpressVPN, you can now generate, store, and manage passkeys inside ExpressKeys. Passkeys are passwordless credentials. They replace a typed password with a key held on your device or in your manager. This aligns ExpressKeys with a wider shift toward passwordless sign-in.

Secure sharing, one link at a time

ExpressVPN also added secure sharing. In its description, you can share vault items, such as logins, cards, and notes, through controlled links. There is an optional email verification step and a one-time view option, so a shared item can be seen once and then closed. If you want to think through the risks of passwordless credentials before you share them, our guide on whether passkeys are safe covers the trade-offs.

Importing from other managers

Moving to a new manager is often the hardest part. ExpressVPN says ExpressKeys now supports direct imports through the FIDO Credential Exchange standard. According to ExpressVPN, you can import from Apple Passwords, Google Chrome, and other managers this way. If you are setting up passkeys across platforms for the first time, our passkeys setup guide for Google, Apple and Microsoft walks through the basics.

Card scanning on iOS

For payment cards, ExpressVPN says the iOS app can scan a physical card with the camera and add it to the vault. That saves typing a long card number by hand. ExpressVPN describes Android support as in development, so plan for it to arrive later rather than today.

A new Cure53 audit

ExpressVPN also published a new independent security audit by Cure53. According to ExpressVPN, the audit found no High or Critical severity issues. ExpressVPN says this brings its total number of published third-party audits to 28. We report these figures exactly as ExpressVPN states them, and have not verified the audit ourselves. Still, a fresh third-party review with no High or Critical findings is a useful signal when you judge a password manager.

What this means for you

The practical takeaway is simple. ExpressKeys now covers the features most people expect from a modern manager: passkeys, sharing, easy imports, and card capture. Passwordless sign-in keeps spreading, so passkey support matters more each year. If you already use another manager, the FIDO Credential Exchange import may make a move less painful.

As always, judge the claims on the evidence. The audit result and audit count come from ExpressVPN. The passwordless direction, though, is bigger than any one product, and it is worth learning now.