Dashlane and Google unveil OpenYOLO, an open-source API for apps to securely access passwords stored in password managers
Context & Ripple Effects
Two months after Google said it would bring password-free logins to Android apps via Project Abacus, it is partnering with Dashlane on the other half of the problem: the passwords that still exist. OpenYOLO is an open-source API that lets apps request credentials from whatever password manager the user already trusts, rather than each app storing its own.
That matters because the vault market had been consolidating around closed products — LastPass's first major post-LogMeIn release earlier this year added emergency access and password sharing — with no standard way for apps to tap them. An open API turns competing managers into interchangeable credential providers on Android.
First-order effects
- Android developers can now read saved passwords from a compliant manager instead of building their own login-storage flows, cutting friction at signup and sign-in.
- Dashlane gets distribution inside every app that adopts the API, positioning its vault — fresh off raising $110M+ — as infrastructure rather than a standalone utility.
Second-order effects
- Rival managers like LastPass face pressure to implement OpenYOLO or lose app integrations to whichever vaults support the standard, shifting competition from features to interoperability.
- Google's own Abacus push for password-free logins means OpenYOLO is explicitly a bridge: the same apps wiring in credential APIs become the natural landing spot when passwords are replaced.
Third-order effects
- If credential access standardizes at the platform level, the password vault migrates from consumer app to OS-layer service — the endpoint of which is visible in Google later enabling passkeys across all accounts to replace passwords outright.
- Authentication consolidates around whoever controls the preauthenticated device and its credential store, making vault interoperability standards a strategic chokepoint between OS vendors and independent managers.
The trend: Android authentication is moving from per-app password storage toward platform-managed credentials, with open APIs like OpenYOLO marking the transition stage before passkey-style cryptographic logins take over.