ExpressVPN officially introduced ExpressKeys, a dedicated password manager app, and ExpressMailGuard, an email aliasing and forwarding service designed to preserve inbox privacy.
The launches represent a strategic decoupling of privacy features from the company’s core VPN product, reflecting a broader trend toward modular digital privacy tools.
ExpressKeys
The ExpressKeys password manager is an evolution of the former “Keys” feature, which was previously integrated into the ExpressVPN app. Now available as a standalone app for iOS and Android, ExpressKeys provides a dedicated environment for securely managing credentials, notes, and payment card details, built with zero-knowledge encryption and full multi-device sync.
The app also integrates a two-factor authentication (2FA) code generator, proactive breach monitoring, a password health checker, and a long-password generator. It retains all core capabilities from its predecessor while offering users a cleaner and more focused interface tailored for credential management.
Existing users of Keys can simply install the new app and log in using their ExpressVPN credentials. The vault, containing stored passwords, secure notes, and 2FA entries, is automatically migrated. The ExpressKeys browser extension remains active under the new branding and continues to sync with the standalone app.
ExpressKeys is included at no additional cost for users with Advanced, Pro, and legacy subscription tiers. The old Keys feature will be removed from the ExpressVPN app on March 5, 2026, at which point ExpressKeys becomes the exclusive app for password management.
ExpressMailGuard
Launched alongside ExpressKeys, ExpressMailGuard introduces an advanced email aliasing service designed to shield users’ primary email addresses. At a time when email serves as a persistent identifier across nearly every online service, ExpressMailGuard gives users a way to create unlimited aliases, forward mail securely, and disable leaked or spammed addresses instantly.
The tool works by forwarding mail from generated aliases through a secure relay layer that strips away identifying metadata. It then delivers the message to a recipient’s inbox selected by the user. Delivered messages are immediately deleted from ExpressVPN’s servers, ensuring minimal data retention. If delivery fails, users can choose to store failed messages temporarily for debugging purposes.
ExpressMailGuard integrates several powerful privacy features, including:
- Dedicated Subdomains to generate unique aliases on the fly
- Alias-level rules and automation for blocking or routing mail
- Reply and send support from aliases, avoiding real email exposure during outbound communication
- Dashboard-based visibility for tracking mail activity, delivery issues, and system bandwidth
- Recipient inbox flexibility, allowing users to change where mail is routed without updating every alias manually
While all ExpressVPN subscription tiers include unlimited alias creation via dedicated subdomains, other features, such as rule creation, recipient management, and daily send limits, vary by plan.
If you liked this article, be sure to follow us on X/Twitter and also LinkedIn for more exclusive content.
