Allow "direct" importing of entries from Apple Passwords (seemingly including passkeys)

[Stokel]

I noticed that the "Passwords" App in macOS now (since 26/tahoe?) has a new menu entry for exporting single or all passwords directly to another password manager.

The following dialogue claims, that this transfers the entry "securely" between the apps and includes "passwords, passkeys and verification codes".

The next step (after being asked for authentication again) is selecting the app to export to.

I apparently don't have any matching apps installed. I therefore can't make a selection.

It would be amazing if KeePassXC could be selected and passwords and even passkeys directly transferred to it.
It also circumvents the unsecured method of exporting passwords unencrypted to a .csv file which could unintentionally and automatically be picked up and saved unencrypted in backups like time machines or simply forgotten to delete after a transfer.

Sadly I haven't found any developer documentation from Apple on how to register an application such that it can be selected and what the transfer/API endpoints are...

[droidmonkey]

This is probably one of those things where the app needs to be app store distributed and follow the undocumented API from Apple to participate. There is a standard being finalized by the passkey folks for secure transfer between storage locations. However, this transfer method with Apple definitely needs to use their API's.

[varjolintu]

This is the API: https://developer.apple.com/documentation/authenticationservices/ascredentialimportmanager
The protocol specification for the exchange is still publicly at draft state: https://fidoalliance.org/specs/cx/cxp-v1.0-wd-20241003.html