Google Introduces Cryptographically Verified Email Credentials for Android

Google has introduced cryptographically verified email credentials for Android via the Credential Manager API, eliminating the need for one-time passwords (OTP) during authentication. The feature aligns with the W3C Digital Credential API standard and provides a unified method for apps to request and retrieve user credentials. This update aims to reduce onboarding friction and enhance security by streamlining the authentication process. The implementation was announced on April 23, 2026, targeting Android devices and applications. No specific technical vulnerabilities or CVE IDs were mentioned in the announcement.