A validation email confirms that a new user intended to register with an application. It closes the loop by sending a confirmation link to the email address used as the user’s unique identifier. section 9.2
A practical validation flow combines messaging, signed tokens, and account state:
- Create a reusable mail-sending module instead of coupling email delivery directly to registration. section 9.2.1
- Send an HTML message containing the link, then notify the registering user to check email. section 9.2.1
New-user confirmation
After registration, the application sends “Confirm Your Email” with a personalized link. The link is valid only within the configured timeout—12 hours by default—and a successful request records the user as confirmed. section 9.2.1
