@agektmr.com
Google Chrome DevRel Identity Tech Lead - Anything about browser identity features: passwords, OTPs, passkeys, identity federation, digital credentials, etc
@agektmr.com兵庫の知事とか栃木の議員とかを応援しちゃう人って、マスコミや世論が人の悪事について騒いでるところに必ず登場するYouTubeとかの嘘かホントか分からない逆張り投稿に陰謀を見出して興奮してしまうんだな。なんかそんなものを垣間見た。
@agektmr.com😱
@agektmr.comReposted by @agektmr.comCan users sign in without leaving the page? When checking out on travel or ecommerce sites or clicking "Like", you're often sent to a login page. Ever wished you could just sign in on the spot? "Immediate UI mode" lets users sign in with passkeys or saved passwords right before navigation.
@agektmr.comWhile currently Chrome-only and not yet in Baseline, `getClientCapabilities()` lets you adopt it as a safe progressive enhancement without disrupting other browsers or Incognito mode. Check it out for your next sign-in design:
developer.chrome.com/docs/identit...
@agektmr.comOur new UX guide walks through four recommended UX patterns—header sign-in links, ecommerce checkout, micro-actions like "Like", and paywall unlocking—along with anti-patterns you should avoid.
@agektmr.comCan users sign in without leaving the page? When checking out on travel or ecommerce sites or clicking "Like", you're often sent to a login page. Ever wished you could just sign in on the spot? "Immediate UI mode" lets users sign in with passkeys or saved passwords right before navigation.
@agektmr.comReposted by @agektmr.comPasskeys made signing in phishing-resistant, but we cannot make user accounts truly secure until we rethink how we recover the account. Email Verification Protocol (EVP) may be an answer.
@agektmr.comNicely done!
@en.sitnik.esReposted by @agektmr.comAdded passkeys to Slow Reader because they make UX much simpler, especially with E2E encryption, where there’s no password recovery.
In the LLM era, criteria and UI taste matter most. Two passkey guides from @agektmr.com:
@agektmr.comYeah, this article touches on phone number paths as well. There's emerging solutions.
@agektmr.comIn my latest blog post, I introduce EVP from the ground up: how it verifies an email address without an inbox trip, and why it is the missing piece in the passkey era.
Please give it a read:
blog.agektmr.com/en/2026/10/e...
@agektmr.comWhile that looks like a great sign-up UX upgrade on the surface, its real significance is how it changes the security equation across the entire account lifecycle.
@agektmr.comA new web standard in the works, the Email Verification Protocol (EVP), takes a completely different approach: it enables websites to verify email possession directly inside the browser, without ever sending an email.
@agektmr.comToday, almost every online service relies on one-time passwords (OTPs) or magic links to confirm an email address. Both force users to leave the browser and open their inbox—and worse, they leave a phishing-vulnerable weak link in the account lifecycle that passkeys alone cannot close.
@agektmr.comPasskeys made signing in phishing-resistant, but we cannot make user accounts truly secure until we rethink how we recover the account. Email Verification Protocol (EVP) may be an answer.
@sgo.toReposted by @agektmr.comReally good article from @agektmr.com !!
@rowan.fyiReposted by @agektmr.com📧 More email verification updates! Not anticipating 🤞 more breaking changes, so if you're waiting for things to stabilise before testing, this is the sign. Android support in stable, dedicated docs, and more 👇
https://developer.chrome.com/blog/email-verification-october-2026
@agektmr.comダウンタイム見終わった。めっちゃ面白かったわー。ネタバレは避けてみた方がいいです
@agektmr.comConnection Allowlists announcement blog post has been published.
developer.chrome.com/blog/connect...
@agektmr.com生成AIで作ったCM増えたよなあ。まだ一目で分かるからいいけど、そのうち見分けつかなくなりそう。これでどれだけの仕事が奪われたのか、それとも低予算でも高い経済効果があったかと見るべきか。
www.somi.co.jp/news/28300/