Table of Contents
The password manager industry faces an existential question: what happens to password managers when passwords go away? The answer, as it turns out, is that they do not go away – they evolve. Every major password manager has begun integrating passkey support, transforming from password-only vaults into unified credential managers. This article, part of our passkeys and passwordless authentication series, examines how the leading password managers are adapting, what they are doing well, and where the gaps remain.
The Industry Shift
Password managers emerged because people cannot manage hundreds of unique, strong passwords without help. With passkeys, the “creating and remembering” problem disappears – but the “managing and organizing” problem does not. You still need to know which accounts you have, what authentication method each uses, where your credentials are stored, and how to recover access if something goes wrong.
The smarter password manager companies recognized this early. Rather than fighting the passkey transition, they are embracing it and positioning themselves as the central hub for all digital credentials. The pitch has evolved from “we store your passwords” to “we manage your digital identity.”
This is not just marketing spin. There are genuine reasons to manage passkeys through a third-party credential manager rather than relying solely on platform-native solutions like iCloud Keychain or Google Password Manager:
- Cross-platform access: A third-party manager works across Apple, Android, Windows, and Linux.
- Organizational features: Tags, folders, notes, and search across all credential types.
- Sharing capabilities: Share credentials with family members or team members.
- Unified view: See passwords, passkeys, TOTP codes, and secure notes in one interface.
- Data portability: Export your data if you ever want to switch tools.
For a broader discussion of why password managers remain essential, see why you still need a password manager in a passkey world.
How Each Major Manager Is Adapting
1Password
1Password has been one of the most aggressive adopters of passkey technology. Their approach includes:
Passkey storage and use. 1Password can create, store, and use passkeys on macOS, iOS, Windows, Android, and in browser extensions. When a website offers passkey creation, 1Password intercepts the request and offers to store the passkey in your vault.
Passkey login to 1Password itself. You can unlock 1Password with a passkey, eliminating the master password for daily use while maintaining the master password as a recovery mechanism.
Universal Sign On. 1Password is working toward a vision where it mediates all authentication – passwords, passkeys, SSO, and biometrics – from a single interface.
Watchtower integration. The security auditing feature now tracks which of your accounts support passkeys but are still using passwords, nudging you to upgrade.
The experience on the Apple ecosystem is particularly polished. 1Password integrates with the macOS and iOS credential provider framework, providing passkey autofill in Safari and all apps.
Bitwarden
Bitwarden’s approach is transparency-first, consistent with its open-source philosophy:
Full passkey support. Bitwarden stores and manages passkeys across all platforms. The browser extensions and mobile apps support passkey creation and authentication.
Open-source implementation. Bitwarden’s passkey handling is part of the open-source codebase, allowing anyone to audit the implementation. This is meaningful for users who value transparency in their security tools.
Self-hosting compatible. If you self-host Bitwarden, your passkeys are stored on your own infrastructure. This appeals to users who want maximum control over their credential data.
Pricing advantage. Bitwarden’s free tier supports passkey storage, making it the most accessible option for users who want passkey management without additional cost. The premium tier ($10/year) adds hardware security key support and advanced features.
Dashlane
Dashlane has taken a distinctive approach by positioning passkeys as central to its identity:
Passwordless vault access. Dashlane allows you to create your account without ever setting a master password, using passkeys and device-based authentication instead.
Passkey dashboard. A dedicated view showing which of your accounts use passkeys vs. passwords, with recommendations for upgrading.
Browser-centric experience. Dashlane’s browser-only architecture (no standalone desktop app) means passkey interactions happen within the browser extension. This works well for web-based accounts but limits integration with native apps on macOS and iOS.
Apple iCloud Keychain / Passwords App
Apple’s built-in solution is not a third-party password manager, but it directly competes with them:
Native passkey creation and storage. iCloud Keychain has supported passkeys since iOS 16 and macOS Ventura, making it the default passkey store for Apple users.
Passwords app (iOS 18+, macOS Sequoia+). The standalone app provides a visual interface for managing passwords and passkeys, bridging the gap between a background service and a proper credential manager.
Advantages: Deepest possible integration with Face ID, Touch ID, Safari, and system autofill. No extra software needed. Free.
Limitations: Limited to the Apple ecosystem (with a basic Windows extension). No organizational features like tags or folders. Limited sharing capabilities. No KDBX export. For a detailed comparison, see our Apple Passwords app comparison.
Google Password Manager
Google’s approach mirrors Apple’s:
Default passkey store on Android and Chrome. Passkeys created in Chrome on any platform can be stored in Google Password Manager.
Cross-platform through Chrome. Wherever Chrome runs, Google Password Manager is available.
Limitations: Tightly integrated with the Google ecosystem. Limited organizational features. No standalone app outside of Chrome’s settings.
KeePass Ecosystem
The KeePass ecosystem represents a fundamentally different approach: local storage, open format, user control. The adaptation to passkeys is happening, but on a different timeline:
KDBX format extensions. The KeePass database format is being extended to support passkey storage. This would allow passkeys to be stored alongside passwords in the same encrypted, portable database file.
KeePassXC. The leading desktop KeePass client is actively developing passkey support. Progress is steady but the implementation is not yet at parity with cloud-based managers.
PanicVault. As a KeePass-compatible app built natively for the Apple ecosystem, PanicVault is positioned to bring passkey support to KDBX databases with the seamless Apple integration that KeePassXC cannot provide. The credential provider extension on iOS and macOS means PanicVault can serve as both a passkey provider and a traditional password provider.
Strongbox. Another KeePass-compatible app on Apple platforms, Strongbox is also working on passkey integration.
For a detailed look at the current state, see passkeys and your KeePass database.
The Feature Gap Analysis
Not all password managers are at the same stage of passkey support. Here is what to evaluate:
| Feature | 1Password | Bitwarden | Dashlane | iCloud Keychain | KeePass (varies) |
|---|---|---|---|---|---|
| Store passkeys | Yes | Yes | Yes | Yes | In development |
| Create passkeys | Yes | Yes | Yes | Yes | In development |
| Passkey autofill (Mac) | Yes | Yes | Yes (browser only) | Yes | Limited |
| Passkey autofill (iOS) | Yes | Yes | Yes | Yes | Varies by app |
| Cross-platform passkeys | Yes | Yes | Yes | Apple + Windows | Yes (via KDBX) |
| Passkey + password in one view | Yes | Yes | Yes | Yes | Yes |
| Passkey sharing | No | No | No | No | N/A |
| Passkey export | Limited | Limited | No | No | KDBX (planned) |
Notable Gaps Across the Industry
Passkey sharing. No password manager currently supports sharing passkeys with other users. This is a protocol limitation – passkeys are bound to an individual’s authentication. The industry needs a solution for shared accounts.
Passkey export/portability. If you store passkeys in 1Password and want to switch to Bitwarden, there is no standard format for transferring passkeys between managers. The FIDO Alliance is working on a credential exchange protocol, but it is not yet finalized. The KeePass ecosystem’s KDBX format could become a de facto standard if passkey extensions are widely adopted.
Offline passkey use. Most password manager passkey implementations require the app to be running and sometimes online. For users who value offline access (a key benefit of the KeePass approach), this is a limitation.
The Emerging Credential Management Model
The password manager of 2026 and beyond is evolving into something more accurately described as a credential manager or digital identity manager. The model looks like this:
Unified credential store. One place for passwords, passkeys, TOTP secrets, recovery codes, and secure notes.
Authentication mediator. The manager sits between you and websites, handling whichever authentication method the site supports – passkey, password, or both.
Security advisor. Proactive alerts about weak credentials, available passkey upgrades, breached passwords, and accounts that need attention.
Recovery infrastructure. Emergency access, backup codes, and account recovery information stored securely for when things go wrong.
Cross-platform bridge. Consistent experience regardless of whether you are on an iPhone, a Mac, a Windows PC, or an Android tablet.
This model explains why the password manager industry is not threatened by passkeys but is instead being transformed by them. The value proposition shifts from “remembering passwords” to “managing your entire digital identity.”
What This Means for Your Choice
If you are choosing a password manager today, passkey support should be a key criterion:
If you want the most polished experience on Apple, 1Password or PanicVault (for KeePass compatibility) are strong choices. iCloud Keychain is free and seamless if you do not need cross-platform or advanced organizational features.
If you want the best value, Bitwarden’s free tier includes passkey support, making it the most accessible option.
If you want maximum data portability, a KeePass-compatible tool gives you the open KDBX format. As passkey support matures in the ecosystem, your credentials remain portable and under your control.
If you work across platforms, 1Password or Bitwarden provides the broadest cross-platform passkey support.
The transition from passwords to passkeys is accelerating, and your password manager should be accelerating with it. Choose a tool that handles both authentication methods today and is clearly investing in the passwordless future.
