Difference between revisions of "Client Email Verification"

From WHMCS Documentation

Line 1: Line 1:
'''Email Verification''' checks to ensure that the email address a client registers with is valid and their own.
+
'''Email Verification''' checks to ensure that the email address a client registers with is valid and their own. When a user or admin creates a new client account or changes a client's email address, the system sends an email asking the user to confirm that they intended to register or make the change to the email address.
  
When you enable this, upon creation of a new client account or change of the account owner's email address, the system sends an email asking the user to confirm that they intended to register or make the change to the email address.
+
This helps protect against signups using incorrectly-typed and unauthorized email addresses. It can also act as part of order review and fraud screening procedures.
  
The validation link they receive is valid for 60 minutes. If it expires, the user can request a new verification email by logging in to the client area.
+
==Enabling Email Verification==
  
==Why enable it?==
+
You can enable email verification in the '''Security''' tab at '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings''' or, prior to WHMCS 8.0, '''Setup > General Settings'''. 
  
Enabling '''Email Verification''' helps to protect against signing up using incorrectly-typed and unauthorized email addresses. It can also act as part of order review and fraud screening procedures.
+
For more information, see [[Security Tab]].
  
 
<div class="docs-alert-info">
 
<div class="docs-alert-info">
 
<span class="title">Note</span><br />
 
<span class="title">Note</span><br />
To help reduce the number of emails new clients are sent after signing up, the client will not receive the separate ''Welcome'' email when '''Email Verification''' is enabled.
+
Enabling '''Email Verification''' will not send an email verification request to any existing users automatically. Their accounts will display as unverified and continue to operate unaffected.
 
</div>
 
</div>
  
==Enabling Email Verification==
+
==Default Behaviour==
  
To enable '''Email Verification''', navigate to '''Configuration (<i class="fa fa-wrench" aria-hidden="true"></i>) > System Settings > General Settings > [[Configuration#General_Settings|Security]]''' or, prior to WHMCS 8.0, '''Setup > General Settings > Security'''.  Check the '''Email Verification''' checkbox and save the changes.
+
WHMCS sends email verification notices when the following events occur:
  
[[File:Enable_email_verification.png|center|850x250px|Enable email verification in general settings]]
+
* A new user completes registration.
 +
* An existing user's email address changes.
  
 
<div class="docs-alert-info">
 
<div class="docs-alert-info">
 
<span class="title">Note</span><br />
 
<span class="title">Note</span><br />
Enabling '''Email Verification''' will not send an email verification request to any existing users automatically. Their accounts will display as unverified and continue to operate unaffected.
+
To help reduce the number of emails new clients are sent after signing up, the client will not receive the separate ''Welcome'' email when '''Email Verification''' is enabled.
 
</div>
 
</div>
 
==Default Behaviour==
 
 
An email verification notice is sent when the following events occur:
 
 
* A new user completes registration.
 
* An existing account owner changes their email address.
 
  
 
User access is not restricted to the client area, services, or support resources prior to email verification completion. This is to allow the user to access the services and support resources they have paid for.
 
User access is not restricted to the client area, services, or support resources prior to email verification completion. This is to allow the user to access the services and support resources they have paid for.
Line 38: Line 32:
 
In the admin area, the email verification banner will no longer display.
 
In the admin area, the email verification banner will no longer display.
  
[[File:email-verified-ca.png|800px|Verified email in client profile view]]
+
==The Validation Link==
 
 
==Resending the Verification Email==
 
 
 
If a user has not verified their email address, they will see the option to resend the verification email in the banner notice in the client area. Admins also have this ability from the client summary page.
 
 
 
Clicking the '''Resend Verification Email''' button sends an email with a link that is valid for 60 minutes. If the recipient follows the link after the 60 minute window or multiple times (which invalidates the previous link) then an error will display upon attempting to verify. The user will have the option to request a new email verification.
 
 
 
<div class="docs-alert-info">
 
Prior to 8.0, the email verification link was valid for 24 hours.
 
</div>
 
 
 
==Client Area User Interface==
 
 
 
Any user who has not completed the email verification process will see a banner reminding them to take action when they log in. This banner appears on all pages of the client area.
 
 
 
No functionality is limited in the client area for users with an unverified email address.
 
 
 
[[File:Verify-email-link-ca.png|center|850px|Email verification banner on client side]]
 
 
 
==Admin Area User Interface==
 
 
 
A banner will be displayed at the top of the client summary page and when viewing orders for any account where the account owner has not completed the email verification process.
 
  
[[File:Client vertification banner 8.png|850px|Client profile verification banner]]
+
The validation link in each verification email is valid for 60 minutes for WHMCS 8.0 and higher or, prior to WHMCS 8.0, 24 hours. If the link expires, the user can request a new verification email by logging in to the Client Area.
<br/><br/>
 
[[File:Client vertification banner order 8.png|850px|Manage orders client verification status]]
 
  
An option to resend the verification email is also available from both pages. Clicking this will invalidate any previous verification links.
+
Users who have not verified their email address will see the option to resend the verification email in the banner notice in the Client Area.  
  
A badge will display alongside the user's email address, denoting whether the email address is verified.
+
Admins can view the client's email verification status from the '''Summary''' tab in the client's profile and a banner will also display when viewing orders from that account. A badge will also display alongside the user's email address, denoting whether the email address is verified.
  
[[File:User verified badge.png|850px|User verified badge]]
+
Clicking '''Resend Verification Email''' sends an email with a new link in a new verification email.

Revision as of 18:49, 17 January 2022

Email Verification checks to ensure that the email address a client registers with is valid and their own. When a user or admin creates a new client account or changes a client's email address, the system sends an email asking the user to confirm that they intended to register or make the change to the email address.

This helps protect against signups using incorrectly-typed and unauthorized email addresses. It can also act as part of order review and fraud screening procedures.

Enabling Email Verification

You can enable email verification in the Security tab at Configuration () > System Settings > General Settings or, prior to WHMCS 8.0, Setup > General Settings.

For more information, see Security Tab.

Note
Enabling Email Verification will not send an email verification request to any existing users automatically. Their accounts will display as unverified and continue to operate unaffected.

Default Behaviour

WHMCS sends email verification notices when the following events occur:

  • A new user completes registration.
  • An existing user's email address changes.

Note
To help reduce the number of emails new clients are sent after signing up, the client will not receive the separate Welcome email when Email Verification is enabled.

User access is not restricted to the client area, services, or support resources prior to email verification completion. This is to allow the user to access the services and support resources they have paid for.

After the user follows the link in the verification email, the user must log in to the client area to complete the verification process. Once they successfully authenticate, a success message will display on the next page.

In the admin area, the email verification banner will no longer display.

The Validation Link

The validation link in each verification email is valid for 60 minutes for WHMCS 8.0 and higher or, prior to WHMCS 8.0, 24 hours. If the link expires, the user can request a new verification email by logging in to the Client Area.

Users who have not verified their email address will see the option to resend the verification email in the banner notice in the Client Area.

Admins can view the client's email verification status from the Summary tab in the client's profile and a banner will also display when viewing orders from that account. A badge will also display alongside the user's email address, denoting whether the email address is verified.

Clicking Resend Verification Email sends an email with a new link in a new verification email.