HACKER Q&A
📣 amadk

Should email verification be mandatory during the registration process?


I am building an authentication system for my website and am trying to figure out whether I should force the user to verify their email address before they can be fully authenticated so the user can perform actions like posting, commenting, purchasing etc.

Most people online seem to suggest that email verification should be a mandatory step in the registration process, because if the user were to ever miss type their email address then they would be at risk of losing all their data when they logout or if another user were to login with the miss-typed email address.

But in practice, most websites like indie hackers, reddit, airbnb, twitch, never enforce email verification during the registration (or even purchasing) process. So how do companies like these handle situations where a user has miss-typed their email address? I'm pretty sure this has happened quite a few times on their platforms given their large user bases.

sources:

- https://ux.stackexchange.com/a/111023

- https://www.forbes.com/sites/ianmorris/2017/08/01/when-companies-dont-verify-email-addresses-this-is-what-happens/#a393d1d148ea

- https://www.theseventhsense.com/blog/email-verification-and-why-its-important


  👤 epc Accepted Answer ✓
People keep using my mac.com address to register for various things, including one bank account. For Instagram I had to register all the mac.com/me.com/icloud.com variations as new accounts simply to stop people from creating accounts using that address.

So, please verify the address. You can decouple it, ie allow someone to go through the flow they're in, but only lock in the transaction (commerce, comment, whatever) once they've verified the address. If they don't verify the address in N hours or days, cancel the transaction.


👤 baash05
I say yeah. If your site has any user generated content, or has a payment required. Allow the user to work for a few hours, or limit their ability to do things while un-verified.

👤 battery_cowboy
It depends. For HN, an email is immaterial, but for Amazon shopping you want to be very sure you have the correct email.