Double opt-in
Double opt-in is asking somebody to confirm a subscription by clicking a link in an email before you add them to a list. The first step is the form they filled in; the second proves the address exists and belongs to the person who typed it. It costs you some signups and buys you a list that bounces less and complains less.
At a glance
- Category
- Consent
- Step one
- A form submission, which is a claim
- Step two
- A click in a confirmation email, which is proof
- Prevents
- Typos, hostile signups and role addresses joining a list
- Costs
- The share of signups who never confirm
How it works
Somebody submits your form. Instead of adding them to the list, you record a pending subscription and send one message containing a unique confirmation link. Clicking it proves two things at once: the address is real and reachable, and the person reading that mailbox intended to subscribe. Only then does the contact become subscribed. If nobody clicks, nothing is added, and the pending record is either retried once or quietly dropped after a while.
Why it matters
Everything downstream of your list quality is decided at signup. Single opt-in lists accumulate mistyped addresses, addresses typed by somebody else, and addresses harvested into a form by a bot, and every one of those turns into a bounce, a complaint or a spam trap hit later. Confirming up front converts that future damage into a smaller list today. In several jurisdictions a recorded confirmation is also the cleanest evidence of consent you can hold, and it is evidence that travels with the contact rather than living in whatever tool you happened to use at the time.
Example
A reader enters their address in a newsletter form. They receive one message with a subject saying to confirm, and a single link. They click, and a contact is created with the product news topic subscribed and the confirmation time recorded. A second person mistypes their address into the same form; the confirmation bounces, nothing is created, and that dead address never appears on a campaign.
Common mistakes
- 01Sending marketing content in the confirmation message, which turns a permission request into the first unconsented send.
- 02Making the confirmation link expire in an hour, so people who read mail in the evening are lost for no reason.
- 03Adding the contact anyway when nobody confirms, which throws away the entire benefit of asking.
- 04Failing to record when the confirmation happened, which leaves you with a subscription you believe in and no evidence anybody else would accept.
Related terms
Frequently asked questions
Does double opt-in hurt list growth?
It reduces the count, because a share of people never confirm. What remains engages more and complains less, so the deliverable audience is often larger than the single opt-in list that looks bigger on paper.
Is double opt-in legally required?
It depends on the jurisdiction, and it is rarely required by name. It is widely treated as the strongest practical evidence of consent, which is why many teams adopt it regardless of the letter of the law.
What should the confirmation email contain?
The reason it was sent, one clear link, and nothing else to click. Adding offers or articles makes it an unconsented marketing message before consent exists.
Sources
Last updated 16 September 2026.
Start sending this morning
Verify a domain and send your first email in minutes.