Experience Cloud sites require that external users' email addresses be verified before certain security features and identity verification flows function correctly. An unverified email address can cause repeated verification code prompts at every login. This article describes four methods to verify an external user's email address and explains how to check the current verification status.
To mark an external user's email address as verified, use one of the four methods below.
Send the user a New Member Welcome Email, which includes a link to set their password. Completing the password setup process verifies the user's email address.
Note: You must enable Send welcome email in Workspaces > Administration > Emails for the target Experience Cloud site before this method is available.
Access the Experience Cloud site as the external user and change their email address. Completing the email address change flow triggers email verification.
Note: The setting "Require email confirmations for email address changes (applies to users in Experience Builder sites)" under Setup > Identity Verification must be enabled in advance. See Define Identity Verification Settings for Your Orgs and Experience Cloud Sites.
The external user logs in to the Experience Cloud site and completes the identity verification process using a verification code sent to their email.
Note: A screen requesting a verification code will appear at each login until the email address is verified. See Identity Verification Code Prompt Appears on Every Salesforce Login.
Use Salesforce Apex to programmatically verify the email address. See Verify Email Addresses with Async Email for Apex method details.
To check whether an external user's email address is verified:
How to check the email verification status
005237176

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.