Overview
This article explains how to customize the text for the error description when users are trying to sign up with an already-existing account.
This is useful in order to avoid enumeration attacks from attackers trying to know which users’ emails exist in your application by avoiding displaying the default error message that says: Email already in use
Applies To
- Sign Up Error
- Email Already Exists
Solution
To customize the error description when users are trying to sign up with an already existing account, use the following management API endpoint:
Set custom text for a specific prompt
The JSON body should be:
{
"signup-password":{
"auth0-users-validation":"Your custom error message"
}
}