This module adds email verification to the user accounts when changing their email.
When a user changes their email address, this module will temporarily save the new value and check if it is already used. If it is not already used, it will send a verification email (configurable) to the new email address with a one-time verification link. Upon using that link the logged in user's email address will be changed to the temporarily stored new address, provided that they are the correct currently logged in user.
If a user wants to change their email address to an email address that is already in use, this won't be shown to end users. Instead, the new email address will get the email - notifying them. The email change will also not happen, but an error will be thrown, since two users with the same email address can't exist in a Drupal site.
This module prevents malicious attempts to gather email addresses with active accounts by trying to change to them.
Other modules worth investigating:
Supporting organizations:
Project information
Minimally maintained
Maintainers monitor issues, but fast responses are not guaranteed.- Maintenance fixes only
Considered feature-complete by its maintainers. - Project categories: Security
100 sites report using this module- Created by l_vandamme on , updated
Stable releases for this project are covered by the security advisory policy.
Look for the shield icon below.
