{"title":"Customer email verification","slug":"customer-email-verification","url":"https://support.storeconnect.com/articles/customer-email-verification","url_markdown":"https://support.storeconnect.com/articles/customer-email-verification.md","subtitle":null,"summary":"How StoreConnect verifies a new customer\u0026#39;s email address, and how to set a time limit that lets unverified customers access their account before verification is required, using the logins.unconfirmed_access_minutes store variable.","type":"Help_Documentation","video_url":"","keywords":"email verification, verify email, email confirmation, confirm email, unconfirmed access, grace period, new account, account registration, checkout account, logins.unconfirmed_access_minutes, store variables, customer accounts, account security","last_modified":"2026-08-21T07:12:35+0000","body_markdown":"When a customer creates an account on your store, StoreConnect sends them an email with a verification link. Verifying the email address confirms the customer owns it before they can use the account. By default, a customer must verify their email before they can log in. You can set a time limit that lets them access their account for a period before verification is required. Email verification is one of several account security settings, alongside account lockout and session timeouts; see [store security settings](store-security-settings) for the full list.\n\n## How email verification works\n\nEmail verification applies to new accounts created when a customer registers on your website, and when a customer sets a password to create an account during checkout.\n\n1. The customer creates an account.\n2. StoreConnect emails them a verification link.\n3. The customer clicks the link to verify their email address.\n4. Once verified, the customer can log in normally.\n\nBy default, the customer must verify their email before they can log in. Until they do, they are sent to a page at `/auth/confirmation/pending` telling them to check their email. If the email did not arrive, they can request a new one from `/auth/confirmation/new`, which is a separate page.\n\nVerification is only required for the initial email address on a new account. Changing the email address on an existing account does not trigger a new verification email.\n\n:::note\nThe verification link does not expire, so a customer can verify their email at any time. The time limit described below controls how long an *unverified* customer can access their account, not how long the link stays valid.\n:::\n\n## Set a time limit for unverified access\n\nYou can allow a new customer to use their account for a set number of minutes before verification is required. This lets a customer reach their order details and account area straight after checkout instead of waiting on the email. Completing a purchase never requires verification, so this setting does not affect whether an order can be placed.\n\nSet the time limit with a store variable on the **Store** record (`s_c__Store_Variable__c`).\n\n| Store variable | Default | Description |\n|----------------|---------|-------------|\n| `logins.unconfirmed_access_minutes` | `0` | Minutes a newly registered customer can access their account before email verification is required |\n\n1. Open the **Store** record and go to the **Store Variables** related list.\n2. Click **New**.\n3. Enter a **Name** that makes sense to your organization, for example `Unverified access minutes`.\n4. Enter the **Key** `logins.unconfirmed_access_minutes`. Keys are case sensitive.\n5. Enter the **Value** as a whole number of minutes, for example `60` for one hour.\n6. Save the record.\n\nThe variable now appears in the **Store Variables** related list, and a customer who registers from that point can use their account for the number of minutes you set before verification is enforced.\n\n### How the value behaves\n\n- When set to `0`, verification is required immediately. The customer cannot log in until they verify their email. A blank, non-numeric, or negative value is also treated as `0`.\n- When set to a positive number, the customer can access their account for that many minutes. After the time limit passes, they are blocked from logging in until they verify.\n\nThe time limit is a one-time countdown that starts when the account is created. It does not reset on each login, and requesting a new verification email does not restart it. Once it elapses, the customer is blocked from logging in until they verify. Their original verification link still works.\n\nThe time limit applies to a customer who is new to your store. If a contact already existed in Salesforce and that person sets a password during checkout, they are sent to the pending page and must verify before they can log in, whatever the time limit is set to.\n\n:::tip\nThere is no maximum value. To effectively remove the block, set the value so high it is never reached in practice, for example `52560000` (about 100 years). The verification email is still sent, but the customer is not blocked for being unverified within any realistic timeframe.\n:::"}