scenario It is a SPA Using email / password login (not social like Google …) There is a user who is already logged in, and the person’s email is already verified The user wants to change the email because the person doesn’t have the access to the email account anymore There is a link “change your e…

Hello, Given that email address is a unique identifier of a user & providing an ability to change the email-address via self-service should be considered a very sensitive operation, so care must be taken to verify the user’s ownership to his current logged-in account along with the ownership to his…

How to let users change their email? SAFELY

Get Help

chrissena September 4, 2021, 7:34pm 4

I know this is old but this looks like it would be useful in this scenario:

Max Age Reauthentication

Topic		Replies	Views
Update user email the right way Get Help users , verify , email	5	21851	March 2, 2018
Update User Email The Right Way - Part 2 Get Help	2	7338	January 7, 2019
Allow users to change their email Get Help auth0 , email	5	10359	June 18, 2020
Change users email address without logout Get Help auth0 , management-api , email-verification , auth0-spa-js	0	3553	August 26, 2020
Clicking on Change password email link also verifies user's email without using email verification link Get Help emails , change-password , email-verification	3	4032	August 4, 2020

How to let users change their email? SAFELY

Related topics