If you want to sign into ExpressVPN on Android without typing your account password, update the app and check the welcome screen. ExpressVPN’s Android version 12.85.0, listed in release notes dated October 28, 2026, adds email-code, login-token, and passkey sign-in, but the rollout is gradual.
A passkey is the best fit if your Android device supports it and you want phishing-resistant sign-in through a fingerprint, face unlock, PIN, or security key. A login token or QR code is useful when you are already signed in on another device. The change affects Android app sign-in, not the VPN connection itself.
Key takeaways
- Check ExpressVPN under Help > App details, then update the Android app.
- Use a passkey when it appears and your Android credential manager is ready.
- Use a private login token or QR code when another device is already signed in.
- Keep email-code or legacy sign-in available while the gradual rollout continues.
- Confirm the US checkout total, renewal amount, billing interval, and refund terms before paying.
What ExpressVPN changed on Android
ExpressVPN’s Android release notes for October 28, 2026, list version 12.85.0 as adding three direct sign-in choices: an email code, a login token, and a passkey. The change applies worldwide to the Android app, subject to account, device, and rollout availability. ExpressVPN says the choices are being released gradually, so two Android users can see different sign-in screens on the same date.
The new methods change how you enter the account. They do not connect the VPN by themselves, encrypt traffic by themselves, or change the IP address that websites see. After signing in, you still need to connect to a VPN server in the app.
The Android support material also documents QR-code transfer, password sign-in, activation-code sign-in, and Google Play subscription restoration. Those routes remain useful when the new choices are absent or when you need another way back into the account.
Start by opening ExpressVPN on Android and checking Help > App details. If the installed version is older than 12.85.0, update it through the Android update channel available in your country. Then return to the welcome screen and check which choices your account displays.
The direct verdict is simple. Passkey sign-in fits you if you want the shortest routine sign-in and your Android device has a protected credential manager. Login-token sign-in fits you if you regularly move access from a signed-in computer or portal. Email-code sign-in remains the practical fallback when the rollout has not reached your account.
Which sign-in fits: passkey, login token, or email code?
A passkey is a cryptographic sign-in credential. Google describes passkeys as using public-key cryptography: ExpressVPN receives a public key, while the private key stays with your device or credential manager. You approve sign-in with the Android authentication method already protecting the device, such as a fingerprint, face unlock, PIN, or security key.
A login token is different. It is a code copied from the ExpressVPN+ portal or transferred through a QR code from a signed-in desktop app. The token is convenient because you do not need to type the account password into the Android app, but anyone who obtains an active token may be able to use it. Keep it private and enter it only in the ExpressVPN app.
An email code sends a verification code to the account email address. It can be useful on a device that does not have the passkey or when you do not have another signed-in device. Its practical tradeoff is that you must access the email account and enter the code before the Android sign-in can continue.
Choose the method that matches the device in front of you:
- Choose a passkey for regular Android sign-in when it appears and the device is protected by a screen lock.
- Choose a login token when the ExpressVPN+ portal or a signed-in computer is already available.
- Choose a QR code when copying a token is inconvenient and the Android camera can scan it.
- Choose an email code when the new options are missing or the passkey is unavailable.
A passkey protects well against phishing and reused passwords because it is tied to the genuine app or website. It is not automatically the easiest recovery method. Keep another working sign-in route available while you confirm that the passkey is saved to the intended Android credential manager.
ExpressVPN’s own documentation is the authority for whether its app supports these methods. Support for passkeys in a password manager or another provider’s service does not prove that a VPN app has the same sign-in feature.
How to sign in with a passkey or login token
Before starting, update ExpressVPN and check the Android version under Help > App details. Open the app’s welcome screen after the update. The available choices can vary because ExpressVPN is rolling out the new methods gradually.
To use a passkey, follow this sequence:
- Open ExpressVPN for Android and tap Sign in.
- Enter the ExpressVPN account email address and tap Continue.
- Select the passkey option when it appears.
- Approve the Android prompt with the saved fingerprint, face unlock, PIN, or security key.
- Confirm that the app completes sign-in before connecting to a server.
The passkey must already be created for the account and supported by the Android device or credential manager. If Android shows more than one credential choice, select the one intended for ExpressVPN. Keep the device screen lock enabled because the passkey relies on the device’s authentication protection.
To create a passkey, use the ExpressVPN+ portal when the account prompt offers that option. Complete the account and device steps there, then return to the Android app and use the passkey choice on the welcome screen. The portal’s passkey instructions describe device fingerprints, face unlock, PINs, and security keys as possible authentication methods.
To use a login token, sign in to the ExpressVPN+ portal on another device and follow these steps:
- Open the Android app and tap Sign in.
- Choose Login token.
- On the signed-in device, open the Android setup area in the ExpressVPN+ portal.
- Select Show other devices > Android.
- Copy the displayed token.
- Paste the token into the Android app and tap Continue.
The portal also provides a QR alternative beside the login token. A signed-in desktop app may show a QR code under Go mobile. Scan the code with the Android device when that option is displayed.
Treat the token as private account access. Do not post it in a message, store it in a shared note, or enter it into a site that is not the ExpressVPN app or portal. If a token is exposed or rejected, request another token and contact ExpressVPN support if access remains unresolved.
If the passkey and token choices do not appear, use the email-code or legacy sign-in method shown by the app. ExpressVPN says availability is gradual, and its Android support page retains older routes. Check the app version again after a later rollout rather than assuming the account or device is permanently unsupported.
What passkeys protect against, and what they do not
Passkeys protect the account authentication step. Google and the FIDO Alliance describe them as resistant to phishing because they are bound to the genuine app or website through public-key cryptography. A fake sign-in page normally cannot use the passkey created for the real service. Passkeys also reduce the risk from password reuse and credential stuffing.
A passkey does not turn on the VPN. It does not encrypt the phone’s traffic, hide the Android IP address, or stop every app, website, carrier, or account from identifying the user. It also does not protect an unlocked device controlled by another person.
A VPN encrypts the connection between the device and the VPN server and changes the IP address websites see. Accounts, cookies, and device fingerprints can still connect activity to a person. A VPN works alongside Android updates, account security, phishing protection, and sensible device access controls.
The login token has a different security model. It is a bearer-style credential, which means possession can matter. Keep it private, use a passkey when available, and keep a working alternative sign-in method until the account is fully set up.
What ExpressVPN costs and what renews
ExpressVPN subscriptions renew automatically by default when the payment method supports auto-renewal. A paid subscription grants one license for simultaneous use on the number of devices allowed by the selected tier.
For a US website purchase checked on October 29, 2026, confirm the checkout page for the plan name, billing term, amount due upfront, effective monthly figure, renewal amount, and renewal interval. The checkout total is the figure to rely on before payment. Bonus months, if shown at checkout, should be treated as bonus time separate from the paid billing term.
The purchase channel changes the refund process. ExpressVPN’s website terms describe a 30-day money-back guarantee for qualifying website purchases. A Google Play purchase follows Google Play’s refund process rather than ExpressVPN’s website guarantee. Check the payment channel, refund window, and renewal wording before completing checkout.
The free tier, free trial, and money-back window are separate ideas. A free tier means the service can be used without paying under its stated limits. A free trial means a temporary no-cost period offered before or around payment. A money-back window means you pay first and request a refund under the applicable terms. Do not treat one as proof that the others exist.
For the US region on October 29, 2026, the practical buying step is to compare the final checkout screen with the plan you intended to select. Confirm the upfront charge, the next renewal amount, the billing interval, and whether the purchase is through ExpressVPN’s website or Google Play.
Android compatibility, rollout limits, and practical tradeoffs
ExpressVPN’s documented change is limited to Android app sign-in. Version 12.85.0 appears in the October 28, 2026 release-note entry, and the new choices are email code, login token, and passkey. ExpressVPN does not give a fixed completion date or a country list for the gradual rollout.
The Android support page presents these methods for Android phones and tablets while retaining password, activation-code, QR-code, and email-code routes. A device can therefore be compatible with the current app and still show only older sign-in choices for the account at that time.
Your next step is to update Android and ExpressVPN, open the welcome screen, and use the methods displayed for your account. If the passkey option is absent, check Help > App details, confirm the update completed, and use the available fallback. If the device does not support the required credential manager or screen authentication, a login token or email code may be easier.
The tradeoff is convenience versus transferability. A passkey is suited to repeated sign-in on one protected Android device. A token or QR code is suited to moving access from a signed-in device, but the credential must be kept private. None of these choices changes the VPN’s server performance, device limits, or connection settings.
Terms, refunds, and the next Android VPN questions
ExpressVPN’s terms place responsibility on the user to assess whether VPN use follows the laws and regulations that apply in the user’s country. The service terms also govern account access, device use, renewal, and payment. Check local law and the service terms before using the VPN, especially when traveling.
After sign-in, the next task is connecting to a server and deciding whether to leave the VPN active. Use the Android VPN setup steps for that work. If battery use becomes the deciding factor, read the VPN battery drain guidance.
A VPN can be useful on public Wi-Fi, for changing the IP address websites see, or for connecting through a chosen server. It cannot make accounts, cookies, or device fingerprints disappear. If a streaming service displays a proxy message, work through the Netflix proxy error fixes.
Frequently asked questions
Does ExpressVPN Android support passkeys?
Yes. ExpressVPN’s Android release notes dated October 28, 2026, list passkey sign-in in version 12.85.0. ExpressVPN says the option is rolling out gradually, so it may not appear on every account.
How do I sign into ExpressVPN Android without a password?
Use a passkey, login token, QR code, or email verification code when the app displays the choice. The login token comes from the Android setup area in the ExpressVPN+ portal.
What should I do if the passkey option is missing?
Check ExpressVPN under Help > App details and update the app. If the option still does not appear, use the email-code or legacy method shown because the rollout may not have reached the account.
Is a login token the same as a passkey?
No. A login token is copied from the ExpressVPN+ portal or transferred by QR code, while a passkey is a cryptographic credential approved through Android device authentication.
Are passkeys safer than passwords?
Passkeys are designed to resist phishing and password reuse because the credential is tied to the genuine app or website. They do not remove risks from a compromised device, stolen device access, or weak account recovery.
Does a passkey turn on the VPN?
No. A passkey authenticates the ExpressVPN account. You still need to open the app, choose a server, and connect.
Does a VPN hide everything from websites?
No. A VPN encrypts the connection between the device and VPN server and changes the IP address websites see. Accounts, cookies, and device fingerprints can still identify a person.
Can I use a QR code instead of a login token?
Yes. The QR code can appear beside the login token in the ExpressVPN+ portal or in a signed-in desktop app under Go mobile. Scan it with the Android device when the app presents that route.
What happens if someone sees my login token?
Treat the token as exposed account access. Request a new token and contact ExpressVPN support if the token is rejected or you cannot regain access.
Do Google Play subscriptions have the same refund rules?
No. Google Play refund requests for in-app purchases follow Google Play’s process. ExpressVPN’s 30-day website guarantee applies to qualifying website purchases under its terms.
What should I do before paying for ExpressVPN?
Confirm the US checkout total, billing interval, upfront amount, effective monthly figure, renewal amount, and refund terms on the payment channel you plan to use. Keep the account email and a working sign-in method available after purchase.
Glossary
Find more VPN guides on Tunnel Verdict. Have a question about your own setup? Contact us and include your device and the VPN you use.
