Skip to content

Glossary · also called confirmed opt-in

What is double opt-in?

Quick answer

Double opt-in, also called confirmed opt-in, adds one step to signup: the subscriber gets an email with a confirmation link and joins the list only after clicking it. That click proves the address is real, reachable and controlled by the person who signed up. You lose some signups that never confirm, and in return you get a list free of typos, bots and traps.

Definition

Double opt-in: A signup flow in which a new subscriber is added to the list only after clicking a link in a confirmation email. It proves the address works and that its owner asked to join, which keeps typos, bots and spam traps off the list.

How double opt-in works

The visitor submits the form and is stored as pending. Your platform sends a confirmation email with a unique link. Clicking it moves the contact to active and records the time, which becomes your proof of consent.

Pending contacts who never confirm are never mailed again beyond the confirmation, and most platforms clear them out after a set period.

Double opt-in vs single opt-in

Single opt-in adds the address the moment the form is submitted. Lists grow faster, but typos, fake signups, bots and malicious signups of other people's addresses go straight in.

Double opt-in grows more slowly and produces a list where every address has been proven to work by its owner. For newsletters and marketing lists, that tradeoff is almost always worth it.

How to get more people to confirm

Send the confirmation instantly, with a plain subject line that says what it is. Tell people on the thank-you page to check their inbox, and name the sender they should look for.

Keep the email to one clear button, and send a single reminder to anyone who has not confirmed after a day.

How RocketVerifier handles it

RocketShield puts verification on the form itself with one script tag, blocking disposable, role-based, mistyped and undeliverable addresses before your confirmation email goes out. Through the API, typo suggestions come back in did_you_mean, so your form can offer gmail.com to a visitor who typed gmial.com. Fewer confirmation emails bounce, and fewer go to addresses that will never click.

Go further

Sources

  1. M3AAWG: Published best practices documents
  2. FTC: CAN-SPAM Act compliance guide for business

FAQ

Double opt-in: common questions

Is double opt-in required by law?

Not under CAN-SPAM in the US. GDPR requires you to be able to prove consent without naming a method, and double opt-in is the most common way to keep that proof. Check the rules for the countries you send to.

Does double opt-in keep spam traps off my list?

Almost entirely. Pristine and typo traps never click confirmation links, so they stay pending and are never mailed again. It does nothing for addresses already on your list.

Should I re-confirm an existing list?

Only for a list of unknown origin or one that has not been mailed in a long time. A re-permission campaign keeps the people who click and lets you retire the rest cleanly.

Turn definitions into a cleaner list

Verify your first emails in minutes. Credits never expire, and unknown results are always free.

100 free credits · No card required · Credits never expire