technology

Google ditches email codes for seamless android logins

Google is poised to revolutionize the way users verify their identities in apps and services with a major overhaul of the login process. The tech giant is replacing traditional email verification codes with a streamlined system that uses digital credentials tied to a single tap on an Android device.

Goodbye email codes, hello one-tap login

Goodbye email codes, hello one-tap login

The new system, integrated into Android's Credential Manager API, allows users to create a verifiable 'identity' directly on their device. Instead of receiving and typing in one-time passcodes (OTPs) or clicking on magic links sent via email or SMS, users will be able to confirm their identity with a single in-app action.

Currently, many services rely on OTPs or magic links for account verification, a process Google considers cumbersome as it requires switching between apps and can slow down registration or login processes. By leveraging digital credentials generated after email verification and securely stored on the Android system, Google aims to make authentication instantaneous without the need to check email inboxes.

The new login system will clearly display the data being shared and with which apps, enhancing user control over personal information. In some cases, basic details like name or profile picture may be included, but email will remain the primary verified element. For developers, the integration will be direct through the digital credential API, enabling the implementation of streamlined registration, account recovery, or sensitive action flows with a single tap - potentially reducing intermediates steps and boosting conversion rates in apps.

However, this feature won't be available for all types of accounts initially, with enterprise or education-managed accounts through Google Workspace and certain supervised profiles excluded from the first phase. The ultimate goal is to make identity verification an invisible process for users, relying on native Android integration rather than external codes or links.