# What are the implications of letting oauth2 users change their email addresses?

**URL:** <https://meta.discourse.org/t/what-are-the-implications-of-letting-oauth2-users-change-their-email-addresses/170371>\
**Category:** Product Support\
**Created:** [November 17, 2020, 4:00pm UTC](https://meta.discourse.org/t/what-are-the-implications-of-letting-oauth2-users-change-their-email-addresses/170371 "2020-11-17T16:00:20Z")\
**Posts on this page:** 1\
**Showing post:** 11

<div class="post-metadata">

**Author:** ![mattdm](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mattdm/32/216484_2.png) [@mattdm](https://meta.discourse.org/u/mattdm)\
**Post date:** [November 17, 2020, 10:50pm UTC](https://meta.discourse.org/t/what-are-the-implications-of-letting-oauth2-users-change-their-email-addresses/170371/11 "2020-11-17T22:50:55Z")

</div>

> [@sam](#):
>
> Yeah secondary email should work here, I am not sure though of the implications here. You may not want to fiddle with the primary emails. Maybe give it a shot and see what happens?

Thanks! Is there a way to let users add secondary email addresses without allowing alteration of the primary?

---

_[View the full topic](https://meta.discourse.org/t/what-are-the-implications-of-letting-oauth2-users-change-their-email-addresses/170371)._