To enhance account security, verification is required when an Experience Cloud user changes their own email address. It is important to note that this requirement applies only to user-initiated email changes. When an admin changes a community user's email address (via UI, REST API, Apex, Flow, or Data Loader), no verification email is sent automatically — the change takes effect immediately and the HasUserVerifiedEmail flag is silently set to false.
Critical Impact: When HasUserVerifiedEmail is false, the Experience Cloud user will immediately lose the ability to log in via passwordless login (OTP via email) until their email is verified. Admins performing bulk email updates (e.g. via Data Loader or API) may unknowingly lock out large numbers of users without realising it.
SELECT Id, Username, FirstName, LastName, Email, HasUserVerifiedEmail FROM User WHERE Id = '(USER ID)'
HasUserVerifiedEmail is true, the user's email is already verified and no further action is needed.These templates are required for verification emails to be sent correctly.
Step 3 — Trigger the verification email
Depending on who initiated the email change, follow the appropriate path below:
If the user changed their own email via their Experience Cloud profile page:
asyncEmailConfirmation.005103627

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.