# User can login without confirming activation mail
**URL:** https://meta.discourse.org/t/user-can-login-without-confirming-activation-mail/79359
**Category:** Feature
**Created:** [January 30, 2018, 10:41am UTC](https://meta.discourse.org/t/user-can-login-without-confirming-activation-mail/79359 "2018-01-30T10:41:15Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@alfabetagama](https://meta.discourse.org/u/alfabetagama)
#### Post date: [January 30, 2018, 10:41am UTC](https://meta.discourse.org/t/user-can-login-without-confirming-activation-mail/79359/1 "2018-01-30T10:41:15Z")
Hi,
we are trying to set up invite only forum
**Steps to reproduce:**
1. administrator invites user
2. user receives email and creates account
3. after account creation, user is automatically logged in and can see the content
At account creation activation mail is sent. If user logs out, he cannot login unless he activates account via email. If user stays logged in for a longer period after initial account creation, and then logs out, he can not login or activate his account, because activation link expires.
**Expected behaviour:**
1. administrator invites user
2. user receives email and creates account. User is promted to activate her account
3. user receives activation email
4. user activates account
5. user can login or is automatically logged after activation
**Site Settings:**
invite only .. checked
enable local logins .. checked
login required .. checked
must approve users .. checked
---
### Author:  [@dax](https://meta.discourse.org/u/dax)
#### Post date: [January 30, 2018, 12:22pm UTC](https://meta.discourse.org/t/user-can-login-without-confirming-activation-mail/79359/2 "2018-01-30T12:22:46Z")
Thanks for the report @alfabetagama, we already know about it, it’s inserted in the fix list 😉
---
### Author:  [@alfabetagama](https://meta.discourse.org/u/alfabetagama)
#### Post date: [January 30, 2018, 12:32pm UTC](https://meta.discourse.org/t/user-can-login-without-confirming-activation-mail/79359/3 "2018-01-30T12:32:55Z")
Thanks for quick reply Daniela,
can you give me ETA on resolution 🙂 ?
---
### Author:  [@dax](https://meta.discourse.org/u/dax)
#### Post date: [January 30, 2018, 2:10pm UTC](https://meta.discourse.org/t/user-can-login-without-confirming-activation-mail/79359/4 "2018-01-30T14:10:04Z")
I can not give you an accurate ETA, part of the fix is ready but must be checked again.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [January 30, 2018, 6:40pm UTC](https://meta.discourse.org/t/user-can-login-without-confirming-activation-mail/79359/5 "2018-01-30T18:40:49Z")
@dax this is not a bug, it has always been the design in Discourse that people you invite are logged in as soon as they click your invite link. Cc @gerhard
The idea is you want people you invite to be posting immediately after they arrive.
---
### Author:  [@alfabetagama](https://meta.discourse.org/u/alfabetagama)
#### Post date: [January 31, 2018, 1:09pm UTC](https://meta.discourse.org/t/user-can-login-without-confirming-activation-mail/79359/6 "2018-01-31T13:09:36Z")
@codinghorror,
in our case we would prefer that users activate their account before login.
Right now, at account creation, user that is not confirmed is logged in automatically and activation mail is sent. If user logs out, he cannot login again unless he activates account via email. If user stays logged in for a longer period after initial account creation, and then logs out, he can not login or activate his account, because activation link expires. And currently user cannot resend activation email.
In my opinion, this behaviour is inconsistent and confusing. If activation is necessary, then user should activate her account prior to login. If it is not necessary, then it should not be sent at all.
Maybe new setting could be introduced which separates these two behaviours?
e.g. “require email confirmation before login”
If checked, system would require activation before login. If unchecked user would be considered activated and logged in automatically.
Best regards