Loading

Disable 'Email Change Verification'

Publiceringsdatum: Apr 2, 2026
Beskrivning

Email Change Verification is a security feature that helps prevent email fraud by requiring users to verify their new email address before the change takes effect. However, certain business situations may require temporarily disabling this verification step. For example, during a company merger when migrating 500+ users to a new email domain, or when correcting email addresses for users who no longer have access to their old email accounts.

While we do not recommend permanently turning off the Email Change Verification feature, System Administrators or Designated Contacts can request that it be temporary disabled. This article explains how to request temporary deactivation of this security feature for any legitimate business need requiring email address changes without user verification.

Available Editions:

All Salesforce Editions

How to Deactivate:

Submit a deactivation request with Salesforce Support

Important Feature Notes:

  • This feature disablement is unrelated to Restrict User Email Domains, which allows you to specify a list of email domains that users in your Org are restricted to. Restrict User Email Domains does not remove the email change verification requirement, while disabling Email Change Verification does. 
  • If you have already disabled Email Change Verification and need to add more Allowed Domains, use the instructions in this article Request additional Allowed Email Domains
  • Disabling this feature also bypasses all individual User Email Verification requirements, which is not recommended.
  • When this feature is disabled, changes to either of the following will not send notifications:
    • Changes to the "Email Address" field on the User Record.
    • Changes to the "Return Address" field under a User's personal "Email Settings."
  • When this feature is disabled, updating existing user emails or creating new users will require the new email domain to fall within a backend 'Allowed Domains List'. This list of domains must be defined by the admin in the request to disable this feature, and can only be updated by Salesforce Support.
  • Users under email domains outside of the backend 'Allowed Domains List' at the time of disablement will not immediately be impacted by this change. They can continue to operate with the unallowed domain until an attempt to modify their email address is submitted.
  • The backend 'Allowed Domains List' will override any domain configurations defined by the Restrict User Email Domains page in Setup.
  • The backend 'Allowed Domains List' can only be viewed and modified by Salesforce Support. At this time, there is no way to view the list within your Organization.
  • This process applies to email changes on both User Records and Organization-Wide Addresses. 
  • For username updates, follow the instructions outlined in Mass Update Usernames without Sending Email Notifications
  • The Core Email Change Verification feature does not affect Chatter Free, Portal or Community users (or creating these users with other domains). A secondary feature has been implemented to secure these license types which cannot be disabled.
  • When this feature is disabled, emails can be sent from addresses in domains that you own that are listed in the Allowed Domains List without requiring email verification.  You should maintain control of those who have access to add users and update email addresses to prevent unauthorized updates.
Lösning

To temporarily disable Email Change Verification in your Salesforce org, you'll need to submit a formal request to Salesforce Support with a signed letter specifying your allowed email domains. If you've reviewed the above notes and still wish to proceed with requesting deactivation, please follow these steps: 

Requesting Deactivation:

1. Have a System Administrator open a request with Salesforce Support.
2. Include the following information in the request:

  • Specify 'Assist with disabling Email Verification'
  • Confirm that you are the System Administrator who can request this feature.
  • Include the Organization ID where you want this feature disabled.

3. Attach a signed letter to your new request with the following information:

  1. Your specific request to disable "Email Change Verification" and why you are looking to disable it.
  2. Your full username and the Organization ID associated with the environments you want to disable "Email Change Verification" for.
  3. Your Case Number.
  4. A list of Trusted/Allowed email domains that should be allowed for new user email addresses.
    • Note: Support cannot disable Email Verification without a specified list of domains that should be Trusted/Allowed for your organization. While verification is disabled, users within the environment will be restricted to using these domains upon user creation or email change.
    • Your company must own the allowed domains. Subsidiary company domains are also allowed.
    • If you need to add a domain from a third party (i.e. not owned by your company or your subsidiary companies), you must provide a signed letter of consent from the third party stating that they permit Salesforce to add their domain to your organization.
    • The salesforce.com domain cannot be added to any organization's list of Trusted/Allowed domains.
    • .invalid domains are not allowed.
  5. Specify whether your company owns the domains you're requesting to add.
    • If your company does not own a given domain, include a signed letter of consent from each domain's owner stating that they permit Salesforce to add their domain to your organization.
  6. Provide your System Administrator or Designated Contact's signature with their title and contact information (phone and email).
    • We will also accept digital signatures but they will go through the same level of verification as a physical signature.

Additional Notes:

  • A new approval letter is required for each new request submitted.
  • Approval letters aren't necessary to re-activate email verification or to remove domain names.  
  • If you have multiple sandboxes and don't want to disable this feature in production, you'll need to submit a new request every time you refresh your sandbox. This will require that you provide the Organization IDs of your environments in a new letter with each new request.
  • Please note that this is a legal process and the appropriate teams will review your request. Once our review has been completed, we will send you a confirmation on the support case.
Knowledge-artikelnummer

000385107

 
Laddar
Salesforce Help | Article