This document describes using Credential Manager to get a cryptographically verified email address from a user's device. This process removes the need for your app users to verify their email with one-time passwords (OTPs) or magic links. This document explains the following areas: - Android compatibility - User experience - Accounts supported - Implication of email deliverability - Comparison with [Sign in with Google](https://developer.android.com/identity/sign-in/credential-manager-siwg) This guide assumes you are familiar with the following concepts: - [Credential Manager](https://developer.android.com/identity/credential-manager) - [Digital Credentials](https://developer.android.com/identity/digital-credentials) ## Android skills [View on GitHub](https://github.com/android/skills/tree/main/identity/verified-email) ### Retrieve verified email Use an [Android skill](https://developer.android.com/tools/agents/android-skills) to integrate a secure, OTP-less email verification flow into your app. To install the skill from the [Android CLI](https://developer.android.com/tools/agents/android-cli), run: android skills add verified-email
## Android compatibility This feature is supported on mobiles, tablets, and foldable devices running Android 9 (API level 28) and higher. The minimum version of Google Play services (GMS) required is 25.49.x. ## User experience The following sections describe the user experience during the verification flow, the need to include fallback verification methods, as well as the recommended user experience for various use cases. ### The verification flow The user experience for sharing a verified email is as follows: 1. The user either focuses on an input field or taps a button that calls the Credential Manager API. Depending on the design of the screen, you can also call the API on your app's screen load. 2. A bottom sheet appears, showing the information that will be shared with the app. If no information is available on that device, the user sees a generic error message. 3. After the user taps **Agree and Continue**, display a success or failure message. 4. **Note**: If the verified email you receive does not match what you expect, inform the user about the mismatch and either ask them to try again with a different credential or provide an alternate verification method, such as through OTPs. 5. (Optional, recommended) If the user is signing up for your service, you should prompt the user to [create](https://developer.android.com/identity/passkeys/create-passkeys) a [passkey](https://developer.android.com/identity/passkeys) to make it easier for them to sign in subsequently. 6. **Note**: The email verification process doesn't automatically trigger passkey creation. However, it is highly recommended to include the steps for passkey creation. Passkeys help users by making it easier and more secure for them to sign in, and remove the need for the conventional username and password interaction. ### Include primary and fallback flows To ensure a streamlined user experience, include the following options on screens that require email verification: - **Primary verification option**: An email field or button to trigger the Credential Manager API flow for quick verification. - **Alternate verification options**: A link or button for users to "Verify another way" or with "Other options" for manual email entry in case of failures, such as no information available on the device, or a mismatch between the retrieved and expected email. This should allow users to try verification with a different credential or by providing a manual OTP. ### Use cases The following sections describe the recommended use cases, as well as the suggested user experience, for email verification. #### Sign up Users can immediately create an account with a verified email without a separate verification step. Optionally, prompt the user to add a passkey. If they opt to add a passkey, trigger the [passkey creation](https://developer.android.com/identity/passkeys/create-passkeys) flow. ![Image showing the digital credentials UI in Credential Manager](https://developer.android.com/static/identity/digital-credentials/images/email-verification-figure1.png) **Figure 1.** Email verification during sign up. #### Account recovery To eliminate the frustration of users searching for recovery codes in their spam folders, allow them to recover their account using the verified email securely stored on their device. Additionally, suggest that they create a passkey for future use. ![Image showing the digital credentials UI in Credential Manager](https://developer.android.com/static/identity/digital-credentials/images/email-verification-figure2.png) **Figure 2.** Email verification during account recovery. #### Reauthentication for sensitive actions Protect sensitive user actions, such as changing settings or updating profile details, by requiring a quick reauthentication step. ![Image showing the digital credentials UI in Credential Manager](https://developer.android.com/static/identity/digital-credentials/images/email-verification-figure3.png) **Figure 3.** Email verification during reauthentication. ## Accounts supported Email verification through Credential Manager only supports verification of consumer Google Accounts. [Workspace accounts](https://knowledge.workspace.google.com/admin/getting-started/set-up-google-workspace-for-your-organization) and [supervised accounts](https://support.google.com/families/answer/9499054) are not supported. A consumer Google Account can be created with an email address from any provider, not necessarily @gmail.com. However, Google verifies these accounts differently: - For @gmail.com accounts: Google is the authoritative source, and the email is known to be verified. - For non-@gmail.com accounts: Google is not the authoritative source for these email addresses in the long term. While Google verifies the email when the account is created, the ownership of that email address might change over time. Therefore, for non-@gmail.com addresses, you should consider an additional verification step, such as sending an OTP, to ensure that the user still has access to the email account. For more information about what verification implies, see [Digital Credentials](https://developer.android.com/identity/digital-credentials). **Note**: Apart from a user's email information, you can request other unverified fields, such as the user's given name, family name, name, and the profile picture of their Google Account. However, only the email is verified by Google. For phone number verification, see [Verify phone numbers with digital credentials](https://developer.android.com/identity/digital-credentials/credential-verifier/about-verifying-phone-numbers). For a Firebase solution, see [Firebase Phone Number Verification](https://firebase.google.com/docs/phone-number-verification). ## Validity and freshness The system issues [verifiable credentials](https://developer.android.com/identity/digital-credentials) (VCs) based on the user's current email from the active Google Accounts on the device. These credentials are issued to the device in advance, typically while the device is idle. While these credentials might remain valid for multiple days, the system performs a check at the moment of sharing the credentials to ensure that the account still exists, is on the device, and that the email address is valid---effectively prioritizing the account's immediate status over the credential's validity window. To help ensure authenticity, a Key Binding (kb) signature is generated at the time of sharing, incorporating the nonce. If a device is offline or the account is removed, the process fails rather than providing an expired VC or a VC for an inactive Google Account. ### Email deliverability While the process confirms the account's legitimacy, it does not guarantee inbox delivery (for instance, the email might be diverted to spam). An OTP remains the definitive method for confirming email deliverability. ## Comparison with Sign in with Google While both Digital Credentials and [Sign in with Google](https://developer.android.com/identity/sign-in/credential-manager-siwg) solutions provide a verified email, the user flows and use cases are different: - **Use cases**: The Credential Manager email verification flow is not exclusively used in sign up or sign in use cases, but rather can be used in any use case involving the retrieval of verified email. This could include account recovery as well. - **Registration**: The Credential Manager flow does not require Google registration, unlike Sign in with Google. - **Platform support**: The Credential Manager flow is an Android-only solution. - **Scopes** : Unlike Sign in with Google, which can use OAuth 2.0 to request access to user data (such as Calendar or Drive through scopes), the Digital Credentials API is strictly for retrieving verified identity attributes. It cannot be used to request additional [authorization scopes](https://developers.google.com/identity/protocols/oauth2/scopes). ## Next steps To implement this feature in your app, see the [Implementation guide](https://developer.android.com/identity/digital-credentials/email-verification-implementation).