Account Security

Email verification

Verification links are single-use and expire automatically.

Opening an email link never consumes it. Verification requires an explicit CSRF-protected confirmation.