# Customer email verification

Source: https://support.storeconnect.com/articles/customer-email-verification · Last modified 21 August 2026

When a customer creates an account on your store, StoreConnect sends them an email with a verification link. Verifying the email address confirms the customer owns it before they can use the account. By default, a customer must verify their email before they can log in. You can set a time limit that lets them access their account for a period before verification is required. Email verification is one of several account security settings, alongside account lockout and session timeouts; see [store security settings](store-security-settings) for the full list.

## How email verification works

Email verification applies to new accounts created when a customer registers on your website, and when a customer sets a password to create an account during checkout.

1. The customer creates an account.
2. StoreConnect emails them a verification link.
3. The customer clicks the link to verify their email address.
4. Once verified, the customer can log in normally.

By default, the customer must verify their email before they can log in. Until they do, they are sent to a page at `/auth/confirmation/pending` telling them to check their email. If the email did not arrive, they can request a new one from `/auth/confirmation/new`, which is a separate page.

Verification is only required for the initial email address on a new account. Changing the email address on an existing account does not trigger a new verification email.

:::note
The verification link does not expire, so a customer can verify their email at any time. The time limit described below controls how long an *unverified* customer can access their account, not how long the link stays valid.
:::

## Set a time limit for unverified access

You can allow a new customer to use their account for a set number of minutes before verification is required. This lets a customer reach their order details and account area straight after checkout instead of waiting on the email. Completing a purchase never requires verification, so this setting does not affect whether an order can be placed.

Set the time limit with a store variable on the **Store** record (`s_c__Store_Variable__c`).

| Store variable | Default | Description |
|----------------|---------|-------------|
| `logins.unconfirmed_access_minutes` | `0` | Minutes a newly registered customer can access their account before email verification is required |

1. Open the **Store** record and go to the **Store Variables** related list.
2. Click **New**.
3. Enter a **Name** that makes sense to your organization, for example `Unverified access minutes`.
4. Enter the **Key** `logins.unconfirmed_access_minutes`. Keys are case sensitive.
5. Enter the **Value** as a whole number of minutes, for example `60` for one hour.
6. Save the record.

The variable now appears in the **Store Variables** related list, and a customer who registers from that point can use their account for the number of minutes you set before verification is enforced.

### How the value behaves

- When set to `0`, verification is required immediately. The customer cannot log in until they verify their email. A blank, non-numeric, or negative value is also treated as `0`.
- When set to a positive number, the customer can access their account for that many minutes. After the time limit passes, they are blocked from logging in until they verify.

The time limit is a one-time countdown that starts when the account is created. It does not reset on each login, and requesting a new verification email does not restart it. Once it elapses, the customer is blocked from logging in until they verify. Their original verification link still works.

The time limit applies to a customer who is new to your store. If a contact already existed in Salesforce and that person sets a password during checkout, they are sent to the pending page and must verify before they can log in, whatever the time limit is set to.

:::tip
There is no maximum value. To effectively remove the block, set the value so high it is never reached in practice, for example `52560000` (about 100 years). The verification email is still sent, but the customer is not blocked for being unverified within any realistic timeframe.
:::

---

## Follow StoreConnect

- [Email Newsletter](https://getstoreconnect.com/c/lp-newsletter)
- [LinkedIn Newsletter](https://www.linkedin.com/build-relation/newsletter-follow?entityUrn=7444956928444862464)
- [YouTube](https://www.youtube.com/channel/UCngKdP2x8l1wcbAKW3tvU8g)
- [LinkedIn](https://www.linkedin.com/company/storeconnect)
- [X / Twitter](https://x.com/storeconnecthq)

## Popular Links

- [Partners](https://getstoreconnect.com/partners)
- [News](https://getstoreconnect.com/articles/news)
- [Events](https://getstoreconnect.com/articles/events)
- [Feature Comparison](https://getstoreconnect.com/how-we-compare)
- [Download a free trial](https://appexchange.salesforce.com/appxListingDetail?listingId=a0N3A00000FMkeKUAT)
- [Book a Demo](https://getstoreconnect.com/contact)

## Documentation

- [Help documentation](https://support.storeconnect.com/help-documentation)
- [AI agents](https://support.storeconnect.com/ai)
- [Videos & tutorials](https://support.storeconnect.com/videos-tutorials)
- [Developer reference](https://support.storeconnect.com/developer-reference)
- [Release notes](https://support.storeconnect.com/release-notes)
- [Troubleshooting](https://support.storeconnect.com/troubleshooting)
- [Trust Center](https://trust.getstoreconnect.com/)
- [Status Page](https://status.storeconnect.com/)

## Contact

- info@getstoreconnect.com
- US +1 415 745 3230
- AUS +61 2 8365 2308

100 S Ashley Dr, Suite 600-2461
Tampa FL 33602-600 USA

Level 22, Sydney Place
180 George Street
Sydney, NSW, 2000, AUS

---

StoreConnect Support — https://support.storeconnect.com/articles/customer-email-verification