> For the complete documentation index, see [llms.txt](https://oten.gitbook.io/identity-support/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oten.gitbook.io/identity-support/user-guide/account-management/account-security/email-verification.md).

# Email verification

### Scope

This document describes how **email verification** is used to secure user accounts by confirming email ownership during critical account actions.

Multi-Factor Authentication (MFA) flows are documented separately and are **out of scope** for this document.

***

### I am new. Where should I start?

#### Purpose

Email verification ensures that:

* The registered email address belongs to the user
* The account can receive important security notifications
* Account recovery actions can be performed safely

***

#### Prerequisites

Email verification applies when:

* You sign up using **email and password**
* You change or update your email address
* You perform account recovery actions

You must have access to the registered email inbox.

***

### I already understand. How do I proceed step by step?

***

### 1. When email verification is required

Email verification is required in the following situations:

* **After signing up with email and Password** (one-time)
* **When changing the registered email address**
* **During password recovery**
* **For important account security confirmations**

> Once an email address is verified, it does not need to be verified again unless it is changed.

***

### 2. Email verification flow

#### Step 1: Verification email is sent

* A verification email containing a one-time code is sent to the registered email address
* The code is valid for a limited time

…

***

#### Step 2: Check your email inbox

* Open the verification email
* Locate the verification code

…

***

#### Step 3: Enter the verification code

* Return to the application
* Enter the verification code into the verification screen

…

***

#### Step 4: Verification completed

* The system validates the code
* Verification completes automatically once the code is correct

…

***

### 3. Security benefits

Email verification helps:

* Prevent account creation using invalid or mistyped emails
* Ensure secure password recovery
* Reduce abuse and fraudulent registrations
* Maintain reliable communication with users

***

### 4. Failure and recovery

#### Didn’t receive the verification email?

* Check spam or junk folders
* Confirm the email address is correct
* Request a new verification email
* Refer to: **What should I do if I don't receive a verification code when signing up or forgot password?**

***

### Additional notes

* Verification codes are **one-time use**
* Codes automatically expire for security reasons
* Email verification is **mandatory** for email-based accounts
* MFA-related email codes are handled in a **separate guide**

***

### Summary

* Email verification confirms email ownership
* Required for email-based sign-up and recovery
* Improves account security and reliability
* Separate from MFA authentication flows