Credential Manager
A unified authentication API on the Android platform that supports passkeys, passwords, federated sign-in and other methods, simplifying developer integration and improving user experience.
Timeline (last 90 days)
Credential Manager provides a single unified API that covers both Passkey and traditional methods such as Google federated sign-in, while retaining a password fallback path.
In the registration flow, developers need to construct a CreatePublicKeyCredentialRequest and call CredentialManager.createCredential; at login they construct a GetPublicKeyCredential and call CredentialManager.getCredential, with no UI code to write throughout.
Conditional create means that when a user signs in with a traditional method such as a password, the system silently creates a Passkey during the autofill flow with no extra action from the user; it requires the credential provider to support autofill integration, and the code must set isConditional = true.
The Restore Credentials API (via Credential Manager) enables zero-click sign-in: the app generates a restore key in the background at some point after the user logs in, stored locally or in the cloud according to the user's backup settings; credentials migrate silently during new device setup; and the app calls Credential Manager on first launch to complete sign-in.
Digital credentials are cryptographically verifiable digital documents stored in a digital wallet on the device, which can be requested by other apps on the device and can also be presented externally through hybrid means such as QR codes; they involve three parties—the issuer, the holder and the verifier—coordinated by Credential Manager.
The system Keychain (macOS) and Credential Manager (Windows) are encrypted and access-controlled by the operating system kernel, and applications can only read and write their own entries through system APIs
All Facts (6)
Credential Manager provides a single unified API that covers both Passkey and traditional methods such as Google federated sign-in, while retaining a password fallback path.
50%UnverifiedIn the registration flow, developers need to construct a CreatePublicKeyCredentialRequest and call CredentialManager.createCredential; at login they construct a GetPublicKeyCredential and call CredentialManager.getCredential, with no UI code to write throughout.
50%UnverifiedConditional create means that when a user signs in with a traditional method such as a password, the system silently creates a Passkey during the autofill flow with no extra action from the user; it requires the credential provider to support autofill integration, and the code must set isConditional = true.
50%UnverifiedThe Restore Credentials API (via Credential Manager) enables zero-click sign-in: the app generates a restore key in the background at some point after the user logs in, stored locally or in the cloud according to the user's backup settings; credentials migrate silently during new device setup; and the app calls Credential Manager on first launch to complete sign-in.
50%UnverifiedDigital credentials are cryptographically verifiable digital documents stored in a digital wallet on the device, which can be requested by other apps on the device and can also be presented externally through hybrid means such as QR codes; they involve three parties—the issuer, the holder and the verifier—coordinated by Credential Manager.
50%UnverifiedThe system Keychain (macOS) and Credential Manager (Windows) are encrypted and access-controlled by the operating system kernel, and applications can only read and write their own entries through system APIs
50%