How do I send a signup confirmation email?

To send a signup confirmation email, you typically do this right after a user creates an account:

1) Generate a confirmation token

Create a unique, hard-to-guess token tied to the user and store it temporarily in your database with an expiry time.

2) Build a confirmation link

Include that token in a URL like:

https://yourapp.com/confirm-email?token=XYZ123

3) Send the email

Use an email provider/service (for example: SendGrid, Mailgun, Amazon SES, Postmark, or SMTP) to send a message containing that link.

4) Verify the token when clicked

When the user opens the link, your backend checks:

• token exists
• token matches a user
• token hasn’t expired
• token hasn’t already been used

Then mark the email as confirmed.

---

Example email content

Subject: Confirm your email address

Body:

Thanks for signing up!
Please confirm your email address by clicking this link:
https://yourapp.com/confirm-email?token=XYZ123

If you didn’t create this account, you can ignore this email.

---

Basic security tips

• Use a random token, not the user ID alone
• Expire tokens after a limited time, like 15–60 minutes or 24 hours
• Make tokens single-use
• Don’t expose sensitive info in the link
• Rate-limit resend requests

---

If you want a quick implementation example

I can show you how to do this in:

• Node.js / Express
• Python / Django or Flask
• PHP / Laravel
• Ruby on Rails
• Java / Spring
• C# / ASP.NET

If you tell me your stack, I’ll give you a ready-to-use example.