# Forcing users to reverify email

**URL:** https://meta.discourse.org/t/forcing-users-to-reverify-email/360247
**Category:** Feature
**Created:** [April 3, 2025, 3:03pm UTC](https://meta.discourse.org/t/forcing-users-to-reverify-email/360247 "2025-04-03T15:03:14Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![benjamincfarmer](https://avatars.discourse-cdn.com/v4/letter/b/87869e/32.png) [@benjamincfarmer](https://meta.discourse.org/u/benjamincfarmer)
#### Post date: [April 3, 2025, 3:03pm UTC](https://meta.discourse.org/t/forcing-users-to-reverify-email/360247/1 "2025-04-03T15:03:14Z")

</div>

I’m an admin on a by invitation support forum and am looking for a way to force users to reverify their email every 90 days. This is to help remove users access if they have left the company that they originally signed up with.

---

<div class="post-metadata">

### Author: ![Jagster](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jagster/32/192154_2.png) [@Jagster](https://meta.discourse.org/u/Jagster)
#### Post date: [April 3, 2025, 5:09pm UTC](https://meta.discourse.org/t/forcing-users-to-reverify-email/360247/3 "2025-04-03T17:09:29Z")

</div>

You could try this plugin:

[https://github.com/discourse/discourse-auto-deactivate](https://github.com/discourse/discourse-auto-deactivate)

---

<div class="post-metadata">

### Author: ![benjamincfarmer](https://avatars.discourse-cdn.com/v4/letter/b/87869e/32.png) [@benjamincfarmer](https://meta.discourse.org/u/benjamincfarmer)
#### Post date: [April 11, 2025, 4:21pm UTC](https://meta.discourse.org/t/forcing-users-to-reverify-email/360247/4 "2025-04-11T16:21:22Z")

</div>

Unfortunately I’m ‘hosted by Discourse’, so plugin use is limited.

I’m looking into an API access right now.

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [September 17, 2025, 9:07pm UTC](https://meta.discourse.org/t/forcing-users-to-reverify-email/360247/5 "2025-09-17T21:07:10Z")

</div>

it’s been a while but this is an interesting use case you are describing. Did you eventually find a solution that you can share here?

---

<div class="post-metadata">

### Author: ![benjamincfarmer](https://avatars.discourse-cdn.com/v4/letter/b/87869e/32.png) [@benjamincfarmer](https://meta.discourse.org/u/benjamincfarmer)
#### Post date: [September 18, 2025, 1:59am UTC](https://meta.discourse.org/t/forcing-users-to-reverify-email/360247/6 "2025-09-18T01:59:41Z")

</div>

No, It is still on our list of things that we would like to implement but it has been pushed to a back burner.

---

<div class="post-metadata">

### Author: ![Ethsim2](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ethsim2/32/522255_2.png) [@Ethsim2](https://meta.discourse.org/u/Ethsim2)
#### Post date: [September 19, 2025, 8:05am UTC](https://meta.discourse.org/t/forcing-users-to-reverify-email/360247/9 "2025-09-19T08:05:18Z")

</div>

yes, i have a repository that might be of intrest to you, but i must admit this is also on my back burner

> <https://github.com/Ethsim12/Discourse-Auto-Deactivate-Users-by-REST-API/blob/main/README.md>

If you want to Fork, then feel free, i welcome any PRs

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [September 19, 2025, 3:52pm UTC](https://meta.discourse.org/t/forcing-users-to-reverify-email/360247/10 "2025-09-19T15:52:17Z")

</div>

I went ahead and slipped this topic across to #Contribute > Feature because forcing members to reverify their email address on a schedule is not a feature that exists in Discourse currently. If there is more demand for it, then perhaps it could be added.

One solution might be an admin setting to always require email verification when logging in locally. I’ve seen this myself recently. Just yesterday my wife set up a family subscription to a newspaper we all read, and I was no longer able to log in using her account because it sent her an email verification link.

External solutions could also work, e.g. by using SSO using a tool that does provide this, and disabling local login. That would take some research to see if one exists!

Beyond that, yes, the best approach would be to use the API. If you try Ethan’s and it works for you, let us know! Would be cool actually to see folks sharing scripts for API use, here on meta. If you want to work on this, please start a new topic in #Development.

---

<div class="post-metadata">

### Author: ![Architect](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/architect/32/520575_2.png) [@Architect](https://meta.discourse.org/u/Architect)
#### Post date: [September 19, 2025, 5:53pm UTC](https://meta.discourse.org/t/forcing-users-to-reverify-email/360247/12 "2025-09-19T17:53:34Z")

</div>

This seems like a good potential feature have voted for this.

---

<div class="post-metadata">

### Author: ![tobiaseigen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tobiaseigen/32/539204_2.png) [@tobiaseigen](https://meta.discourse.org/u/tobiaseigen)
#### Post date: [October 19, 2025, 5:53pm UTC](https://meta.discourse.org/t/forcing-users-to-reverify-email/360247/13 "2025-10-19T17:53:56Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
