Skip to content

Verified Email for Android

Guides an agent to add passwordless, verified email retrieval to an Android app via Credential Manager.

Repository
android/skills
Stars
10,278
Licence
Apache-2.0
Files
7 files

What it does

This skill gives the agent a step-by-step guide for adding a sign-up, account recovery, or re-authentication flow to an Android app that gets a user's email from a trusted provider such as Google, using Android's Credential Manager and the OpenID4VP digital credentials standard. Instead of sending a one-time code by email, the app asks the user's device for a cryptographically signed email credential. The agent can find likely screens and view-models in your codebase, build the request, parse the response, and leave TODOs for server-side checks. It is client-side only; the skill itself states that your backend must validate the credential.

Great for

  • Android developers adding OTP-less sign-up or account recovery to an existing app
  • Teams whose backend can already verify SD-JWT credentials
  • Developers who need a re-authentication step for sensitive actions like deleting an account

Skip it if

  • Apps that must support Google Workspace accounts, since the skill notes Google does not issue verifiable credentials for them
  • Anyone expecting the email to be fresh; the skill says non-gmail addresses have no freshness claim and recommends an extra OTP challenge, and skipping server-side validation would be a security risk
  • Non-Android platforms or apps with minimum SDK below 28 and older Google Play services

Try asking

  • “Add a verified email sign-up option to my Android app using Credential Manager”
  • “Find the sign-up and account recovery screens in my project that could use verified email”
  • “Help me build the OpenID4VP digital credential request and parse the SD-JWT response in Kotlin”
  • “Add a re-authentication step before deleting an account using a verified email credential”
Step-by-step guide: how to use Verified Email for AndroidInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 7 original files, the Apache-2.0 licence and an attribution note.

    verified-email.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip verified-email.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip verified-email.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Give the agent your app's minimum SDK and Play services version so it checks the requirements first.
  • Ask for the server-side validation TODOs explicitly and implement them in your backend; the skill does not do this.
  • Review the generated code carefully, since the skill assumes a local SdJwtParser and VerifiedUserInfo class you will need to write or adapt.

What's inside

  • references/android/identity/credential-manager/index.md
  • references/android/identity/digital-credentials/email-verification-implementation.md
  • references/android/identity/digital-credentials/email-verification.md
  • references/android/identity/digital-credentials/index.md
  • references/android/identity/passkeys/create-passkeys.md
  • references/android/identity/sign-in/credential-manager-webview.md
  • SKILL.md

Redistributed unmodified from android/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.