A user, Alec, reports a login issue where a moderator is locked out of the site after attempting to change their email address. The new email isn’t receiving the confirmation, and the system continues to send it to the old email. Alec tried resending the email and demoting the mod, but the issue persists. Alec suggests merging accounts as a workaround. Heliosurge recommends either resending the activation email or manually activating the account, noting that merging accounts can work. JammyDodger suggests checking the require change email confirmation setting to ensure non-staff users aren’t required to confirm their old email.
From what I understand he no longer has access to his old email address, and was in the process of changing it to his new email address. Now he cant log in with his old email address, and the new email address has not been sent the authorization.
I resent the aurthorisation, and although it appears its sending it to his new email address, it simply sends an email to the old email address.
Removing their mod status should mean they no longer have to confirm their old email address and only need to authenticate their new email. Could you check your require change email confirmation admin setting and see if you’re asking non-staff to also perform this security check?