skills.rest
IsKenKenYa
IsKenKenYaCOMMUNITY
Explore all skills by this author →
GitHub

verified-email

Implement OTP-less verified email retrieval on Android using Credential Manager and OpenID4VP.

2|Updated Jun 21, 2026
Search Tags:#authentication#android#email verification#sd-jwt#openid4vp#digital credentials#credential manager
One-click install
npx skills add https://github.com/IsKenKenYa/skills --skill verified-email-iskenkenya
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: verified-email
Source: https://github.com/IsKenKenYa/skills/tree/main/skills/android/identity/verified-email
Command: npx skills add https://github.com/IsKenKenYa/skills --skill verified-email-iskenkenya

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Traditional email verification forces users through OTP codes or magic links, creating sign-up friction and drop-off. This Skill guides AI agents to integrate Android's Credential Manager Digital Credentials API so apps can retrieve a cryptographically verified email address directly from the user's device, skipping OTP entirely. ## Core Features & Use Cases - OpenID4VP Request Construction: Builds the DCQL query and GetDigitalCredentialOption request JSON to claim email, email_verified, name, and related attributes from a UserInfoCredential in SD-JWT format. - Client-Side Integration Workflow: Covers dependency setup, Credential Manager initialization, request presentation, SD-JWT response parsing, and handling of the post-August-2026 W3C response format. - Server-Side Validation Guidance: Specifies issuer verification, SD-JWT signature checks against Google's JWKs, nonce validation, and cnf key-binding checks required before account creation. - Use Case: A developer adding sign-up, account recovery, or re-authentication flows to an Android app uses this Skill to locate integration points (e.g., SignUpScreen, AuthViewModel) and wire in verified email retrieval, optionally followed by passkey creation. ## Quick Start Use the verified-email skill to add OTP-less verified email verification to my Android app's sign-up screen using Credential Manager.

Frequently Asked Questions about verified-email

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify an email address on Android without OTP?▼

Use the Credential Manager Digital Credentials API with an OpenID4VP request containing a DCQL query for the UserInfoCredential claims. Google returns an SD-JWT with a cryptographically verified email, which your server validates before account creation.

How to implement verified email with Android Credential Manager?▼

Add the androidx.credentials dependencies, create a CredentialManager instance, build a GetDigitalCredentialOption with an OpenID4VP request JSON, and call getCredential(). Parse the returned SD-JWT on the client for UI updates, but validate it fully on your server.

What Android version supports digital credential email verification?▼

Verified email retrieval requires Android 9 (API level 28) or higher and Google Play services version 25.49.x or above. The broader Digital Credentials Verifier API is supported from Android 6 (API level 23).

Does verified email work with Google Workspace accounts?▼

No, Google does not issue verifiable credentials for Workspace or supervised accounts; only consumer Google Accounts are supported. For [email protected] addresses, Google verified the email at account creation, so an additional OTP challenge is recommended for freshness.

Why is server-side validation required for digital credentials?▼

Client-side parsing is only for UI updates and is not secure. Your server must verify the issuer field, the SD-JWT signature against Google's public JWKs, the nonce to prevent replay attacks, and the cnf key binding to confirm presenter identity.

Can Credential Manager email verification run inside a WebView?▼

Yes, but the WebView cannot call the API directly. You must implement a JavaScript bridge so the WebView signals the native app, which then performs the actual Credential Manager API call.

Related Skills

Explore More Software Engineering Skills→
citytexicitytexi
1

verified-email

Implement verified email retrieval on Android using Credential Manager and OpenID4VP.

Community
Advanced
ritual-foundationritual-foundation
62

ritual-dapp-passkey

Implement WebAuthn passkey authentication with SECP256R1 verification for Ritual dApps.

Official
Advanced
androidandroid
6.6k

verified-email

Retrieve cryptographically verified emails via Android Credential Manager with OpenID4VP.

Official
Advanced
meridianhubmeridianhub
10

skill-tilt-development

Automate Kubernetes local development workflows with Tilt for fast rebuilds and live reload.

Official
Intermediate