Making Email Verification Feel Like Nothing at All
A short note on why we shipped a dedicated email verification flow, and how a link-based confirmation step became one of the more load-bearing parts of account setup.
Every account system has a moment where trust gets established. For most products — ours included — that moment is email verification. It's easy to treat it as a formality, a checkbox between signup and the real product. We took it more seriously than that, and this is a short note on why.
Why a dedicated verification step
An unverified email is a liability. It breaks password recovery, it poisons transactional deliverability, and it makes every downstream security decision — 2FA enrollment, team invites, billing notifications — rest on an unproven assumption. Rather than paper over that with warning banners, we wanted a clean, single-purpose flow: you click the link in the email we sent, you land on a page that confirms the address, and you're done. Verify Your Email Address
The design constraint was that the user shouldn't have to think. No codes to copy, no tabs to reconcile, no forms to re-submit. A link in the inbox, a confirmation page that loads, and control returns to the product.
What this unlocks
A verified email is the pivot point for almost everything that comes after account creation. Once we can trust the address, we can safely route password resets to it, attach it to audit logs, use it as the canonical identity across team invitations, and send billing and security notifications with confidence they'll actually arrive. Getting this step right early means we don't have to re-litigate identity later in the product.
It also matters for the parts of the product a user hasn't reached yet. Verification is a prerequisite we can lean on when we ship features that assume a real, reachable human on the other end — the kind of features that would otherwise need their own bespoke trust checks.
What's next
The verification flow is intentionally boring, and we plan to keep it that way. Future work is mostly about the edges: better handling for expired or reused links, clearer recovery when someone loses access to the inbox they signed up with, and tighter integration with the rest of the account settings surface. If you want the step-by-step, the help-center article walks through it. Verify Your Email Address