Google brings instant email verification to Android, no OTP needed
ID: 3e0be590-633d-5612-a923-30e2f81d98c6
STIX ID: report--3e0be590-633d-5612-a923-30e2f81d98c6
Feed Name: Help Net Security
Google has added cryptographically verified email credentials to Android through the Credential Manager API, following the W3C Digital Credential API standard. The feature lets apps request and receive a verified email address from a user's personal Google Account on-device (Android 9+ with recent Google Play services), streamlining sign-up, account recovery, and authentication flows while leaving name and profile fields unverified; developers should still choose Sign in with Google for federated sessions and consider prompting users to create passkeys.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
