Manage User Email Address Verification

Check a User’s Email Verification Status

To check the verification status of a user's email, look at the Email field on the user's details in Setup. To check the email verification status of multiple users, create an Identity Verification Methods report or run a SOQL query on the TwoFactorMethodsInfo object to check the HasUserVerifiedEmailAddress field.

• To check an individual user's email verification status, view the user’s details in Setup.
  1. From Setup, in the Quick Find box, enter Users, and then select Users.
  2. Click the full name of the user.
  3. On the User Details page, find the Email field.

     If the user’s email address is unverified, a Verify link appears next to the Email field.

     After the user completes verification, the Verify link changes to Verified.

  Your users can also see their own email verification status from the Advanced User Details page.

• To check the email verification status for multiple users, use one of these options. Create a report and include the User Verified Email field.
  1. Create an Identity Verification Methods report and include the User Verified Email field.
  2. Use SOQL to query the TwoFactorMethodsInfo object. The HasUserVerifiedEmailAddress field indicates whether the user's email address is verified.

  Here's a sample SOQL query to see which users have unverified email addresses.

  SELECT UserId, HasUserVerifiedEmailAddress FROM TwoFactorMethodsInfo WHERE HasUserVerifiedEmailAddress=false

Initiate Email Verification for Your Users

Start email verification for one user or for multiple users. In each case, the user receives a temporary verification link at their unverified email address. The initiation method determines how long the link remains valid. If a verification link expires before the user clicks it, send the user a new verification link.

These steps apply to email verification for the email on a Salesforce user account. Only users can verify their return address for email sent through Salesforce.

Note For an internal user, the password reset process also verifies their email address. For an external user, such as a customer or partner who accesses Experience Cloud sites, the password reset process doesn't verify their email address.

• To start verification for a single user, use the Verify link on the user detail page.
  1. From Setup, in the Quick Find box, enter Users, and then select Users.
  2. Click the full name of the user.
  3. Next to the Email field value, click Verify.
  The user receives a verification link that expires after 72 hours.
• To start verification for multiple users, use the asyncEmailConfirmation Apex method. See Verify Email Addresses with Async Email.

  With this method, users receive a verification link that expires after 7 days.

• As a user, to start verification for your Salesforce email address, use a link on the Advanced User Details page.
  1. From your personal settings, in the Quick Find box, enter Advanced User Details, then select Advanced User Details.

Identify Users with an Unverified Return Email Address

Before Spring ’25, users could save an unverified return email address in My Email Settings. Users with an unverified return email address can’t send email from Salesforce. To identify these users, use the Return Address and Verified Return Address fields on the Users list in Setup.

1. From Setup, in the Quick Find box, enter Users, and then select Users.
2. Add or edit a list view, and add these fields.
   • Return Address—The user’s return email address.
   • Verified Return Address—Indicates whether the user’s return email address was manually verified in My Email Settings.
3. To identify users that can’t send email from Salesforce because their return address is unverified, filter the list.
   1. Add a filter for Return Address not equal to a blank value.
   2. Add a filter for Verified Return Address equals false.

   The Verified Return Address field indicates whether the user manually verified their email address on My Email Settings.

   

   Note

   If you use DomainKeys Identified Mail (DKIM) or an authorized email domain to verify user email addresses, the Verified Return Address is false by default for user accounts with emails that are verified via those methods.

   However, those users can still manually verify their return email address, either before or after the DKIM or authorized email domain exists. The Verified Return Address field is true for those users even though their email address is verified via another method.

4. Instruct users to click Resend Verification Email in My Email Settings to verify their return email address.

   Only users can verify their return address for email sent through Salesforce. Admins can’t initiate that verification email.

Require User-Level Email Verification