ExpressVPN Android App Adds Passkey Login Methods
The latest app update enables passwordless authentication using the FIDO2 standard for subscribers.
Updated on Oct. 29, 2026 in Cybersecurity
Live Poll
Do you trust passwordless authentication methods like passkeys to secure your personal online accounts?
ExpressVPN has updated its Android application to version 12.85.0, introducing three new authentication methods: passkeys, email verification codes, and time-limited login tokens. This update is now available to users, though legacy activation codes remain supported as an alternative sign-in method.
Why it matters
The implementation of passkeys—a passwordless authentication standard using cryptographic pairs—replaces conventional passwords to reduce credential theft risks. These additions accelerate the industry shift toward hardware-backed account security on mobile devices.
The update adds three authentication methods, including FIDO2/WebAuthn passkeys, which use device-based cryptography rather than shared secrets. These new options supplement the legacy activation code system, which the company intends to phase out.
The players
ExpressVPN
A provider of virtual private network services known for its multi-platform subscription software stack.
The details
Passkeys utilize the FIDO2/WebAuthn standard, an open protocol that uses public-key cryptography to authenticate users via hardware sensors or device biometrics. Users can alternatively generate a login token from the web portal, which is then entered via text or QR code to establish a session. Verification codes sent via email add a secondary layer of identity confirmation to ensure secure access without needing to store traditional passwords.
Timeline
October 29, 2026: Version 12.85.0 was released for Android users.
End of 2026: Full user base access is expected for the new options.
The Tech Race
This release tracks with a wider industry move by major platforms to retire traditional alphanumeric passwords in favor of FIDO-compliant passkeys. ExpressVPN is aligning its mobile stack with this standard to match the security authentication protocols already common across mobile operating systems.
Android users can immediately access these sign-in methods by updating to version 12.85.0, though legacy activation codes remain available as a fallback. The transition aims to replace standard password management for all subscribers by the end of 2026.
The takeaway
ExpressVPN is moving away from activation codes to secure, hardware-backed identity verification. Users should monitor account settings for prompts to link a passkey, which will replace traditional credentials over the coming months.
Further reading
For broader trends in secure credential management, visit the Cybersecurity section.
Source note: This article includes information reported by TechRadar.
Live Poll
Do you trust passwordless authentication methods like passkeys to secure your personal online accounts?
