---
title: Configuring email confirmations
related:
  - https://docs.kentico.com/13/managing-users/user-registration-and-authentication/enabling-user-registration.md
  - https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-email-marketing/enabling-double-opt-in-for-newsletters.md
---

> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).

It is recommended to use all types of email confirmation that Xperience provides or allows you to implement. The email confirmations **protect the users** from being subscribed to mass emails and inform them of potential malicious attempts to change their passwords.

## Email confirmation for newly registered users

It is recommended to require new users to confirm their registrations on your website via email. This protects the users and their emails from identity theft – it prevents other users from registering with someone else's email address.

To require the users to confirm their registrations, implement registration functionality with email confirmation. See [Enabling user registration](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/enabling-user-registration.md).

## Administrator's approval of newly registered users

You can configure the system to keep the accounts of newly registered users inactive until a site administrator confirms their registration. This is useful for protecting the system from being overwhelmed by fake users and spambots and it also allows the administrator to verify user identities and the account types they created.

Using this feature will improve your website's security, but it can also significantly slow down the registration process and fend off potential users. It depends on the purpose of your website and on how important the true identities of users are. See [Enabling user registration](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/enabling-user-registration.md).

## Administration password change via the Forgotten password functionality

When changing their password through the **Forgotten password** functionality on the administration interface sign in page, users are required to change their password through a password change link sent to them in a _change password request_ email. An additional confirmation email can be sent upon a successful change of the user's password if the **Send password reset confirmation email** option in **Settings -> Membership & Security -> Passwords** is enabled.

To learn more, see: [Configuring password resets for Xperience administration](https://docs.kentico.com/13/securing-websites/designing-secure-websites/securing-user-accounts-and-passwords/configuring-password-resets-for-xperience-administration.md)

## Marketing email double opt-in

The double opt-in functionality, also referred to as confirmed opt-in or closed-loop opt-in, adds an additional security layer to user subscriptions. When users subscribe to receive mass emails, the system sends a confirmation message to their email address first. Only after the users confirm the subscription by clicking the link included in the message will the system add their addresses to the subscription mailing list.

Using this functionality is strongly recommended, as it protects the users from receiving large amounts of unsolicited emails without their knowledge. It eliminates scenarios where users submit incorrectly typed email address for subscription, or subscribe someone else's address out of malice.

You can enable and implement double opt-in functionality for newsletters:

- [Enabling double opt-in for newsletters](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-email-marketing/enabling-double-opt-in-for-newsletters.md)
- [Implementing newsletter subscriptions](https://docs.kentico.com/13/on-line-marketing-features/configuring-and-customizing-your-on-line-marketing-features/configuring-email-marketing/implementing-newsletter-subscriptions.md)