Loading
Prepare for Email to Become the Default Login ExperienceRead More
Secure Your Salesforce Org
Manage User Email Address Verification

Manage User Email Address Verification

Users can’t send outgoing email from Salesforce until their Salesforce email address and return email address are verified. This requirement improves security in Salesforce and reduces the risk of email spoofing and spam. Identify users with unverified email addresses or return email addresses. Then learn how to initiate the verification process.

Required Editions

Available in: Salesforce Classic and Lightning Experience
Available in: all editions except Database.com
User Permissions Needed
To edit users: Manage Internal Users
Note
Note

To send email on behalf of your users, Salesforce requires both domain-level and user-level email verification. See Requirements to Send Email from Salesforce and Determine How to Verify Your Email-Sending Domains.

On the My Email Details page in Settings, users can specify a return email address for emails sent through Salesforce. If the return address differs from the verified email address for the user account, then the user can’t send email from Salesforce until the return address is also verified.

These email verification requirements apply to any user who sends emails through Salesforce. When the From address is an unverified user email address, Salesforce can’t send email for that user.

To learn how to verify your email address in Salesforce, see Verify Your Email Address and Return Email Address in Salesforce.

Check a User’s Email Verification Status

To check the verification status of a user's email, look at the Email field on the user's details in Setup. To check the email verification status of multiple users, create an Identity Verification Methods report or run a SOQL query on the TwoFactorMethodsInfo object to check the HasUserVerifiedEmailAddress field.

The email verification requirement applies to any user who sends emails through Salesforce. If a user sends an email from an unverified email address, Salesforce rejects the email message and doesn’t complete the send.

  • To check an individual user's email verification status, view the user’s details in Setup.
    1. From Setup, use the Quick Find box to find and select Users.
    2. Click the full name of the user.
    3. On the User Details page, find the Email field.

      If the user’s email address is unverified, a Verify link appears next to the Email field.

      After the user completes verification, the Verify link changes to Verified.

    Your users can also see their own email verification status from the Advanced User Details page.

  • To check the email verification status for multiple users, use one of these options. Create a report and include the User Verified Email field.
    1. Create an See How Your Users Verify Their Identity and include the User Verified Email field.
    2. Use SOQL to query the TwoFactorMethodsInfo object. The HasUserVerifiedEmailAddress field indicates whether the user's email address is verified.

    Here's a sample SOQL query to see which users have unverified email addresses.

    SELECT UserId, HasUserVerifiedEmailAddress FROM TwoFactorMethodsInfo WHERE HasUserVerifiedEmailAddress=false

Initiate Email Verification for Your Users

Start email verification for one user or for multiple users. In each case, the user receives a temporary verification link at their unverified email address. The initiation method determines how long the link remains valid. If a verification link expires before the user clicks it, send the user a new verification link.

These steps apply to email verification for the email on a Salesforce user account. Only users can verify their return address for email sent through Salesforce.

Note
Note For an internal user, the password reset process also verifies their email address. For an external user, such as a customer or partner who accesses Experience Cloud sites, the password reset process doesn't verify their email address.
  • To start verification for a single internal user, use the Verify link on the user detail page.
    The Verify link isn't available for external users, such as customer or partner users who access Experience Cloud sites.
    1. From Setup, use the Quick Find box to find and select Users.
    2. Click the full name of the user.
    3. Next to the Email field value, click Verify.
    The user receives a verification link that expires after 72 hours.
  • To start verification for multiple users, use the asyncEmailConfirmation Apex method. See Verify Email Addresses with Async Email.

    With this method, users receive a verification link that expires after 7 days.

  • As a user, to start verification for your Salesforce email address, use a link on the Advanced User Details page.
    1. From your personal settings, in the Quick Find box, enter Advanced User Details, then select Advanced User Details.

Identify Users with an Unverified Return Email Address

Before Spring ’25, users were able to save an unverified return email address in My Email Settings. Users with an unverified return email address can’t send email from Salesforce. To identify these users, use the Return Address and Verified Return Address fields on the Users list in Setup.

The Verified Return Address field isn’t available when Enhanced User List View is enabled. To disable that feature temporarily, go to the User Management Settings Setup page and turn off Enhanced User List View.

  1. From Setup, use the Quick Find box to find and select Users.
  2. Add or edit a list view, and add these fields.
    • Return Address—the user’s return email address.
    • Verified Return Address—indicates whether the user’s return email address was manually verified in My Email Settings.
  3. To identify users that can’t send email from Salesforce because their return address is unverified, filter the list.
    1. Add a filter for Return Address not equal to a blank value.
    2. Add a filter for Verified Return Address equals false.

    The Verified Return Address field indicates whether the user manually verified their email address on My Email Settings.

    Note
    Note

    If you use DomainKeys Identified Mail (DKIM) or an authorized email domain to verify user email addresses, the Verified Return Address is false by default for user accounts with emails that are verified via those methods.

    However, those users can still manually verify their return email address, either before or after the DKIM or authorized email domain exists. The Verified Return Address field is true for those users even though their email address is verified via another method.

  4. Instruct users to click Resend Verification Email in My Email Settings to verify their return email address.

    Only users can verify their return address for email sent through Salesforce. Admins can’t initiate that verification email.

Bypass User-Level Email Verification

If a trusted integration or admin manages your users’ email addresses in Salesforce, admins can bypass the requirement for user-level email verification via an authorized email domain. This feature affects users’ ability to send email from Salesforce. It has no impact on user account verification or the user’s ability to log in to Salesforce. See Use a Verified Domain for User-Level Email Verification.

 
Loading
Salesforce Help | Article