Django AllAuth Email Verify Fix

In this tutorial, you'll learn about Django AllAuth Email Verify Fix. We cover key concepts, practical examples, and best practices.

The Problem

New user registrations don't require email confirmation. Spam accounts register freely, and users can't reset passwords without a verified email.

Quick Fix

Wrong — no email verification

# settings.py
ACCOUNT_EMAIL_VERIFICATION = 'none'
ACCOUNT_EMAIL_REQUIRED = False

Output: Users register with fake emails. No way to verify ownership. Password reset doesn't work reliably.

Correct — mandatory email verification

# settings.py
ACCOUNT_EMAIL_REQUIRED = True
ACCOUNT_EMAIL_VERIFICATION = 'mandatory'
ACCOUNT_CONFIRM_EMAIL_ON_GET = True
ACCOUNT_EMAIL_CONFIRMATION_EXPIRE_DAYS = 3
ACCOUNT_LOGIN_ON_EMAIL_CONFIRMATION = True

Output: After registration, users receive a confirmation email. They must click the link within 3 days to activate their account.

Email backend configuration

# settings.py — development (console)
EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend'

# settings.py — production (SMTP)
EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend'
EMAIL_HOST = 'smtp.gmail.com'
EMAIL_PORT = 587
EMAIL_USE_TLS = True
EMAIL_HOST_USER = 'noreply@dodatech.com'
EMAIL_HOST_PASSWORD = 'your-app-password'
DEFAULT_FROM_EMAIL = 'noreply@dodatech.com'

Custom email template

# Templates/account/email/email_confirmation_signup_message.txt
"""
Hello {{ user.username }},

Please confirm your email by clicking:
{{ activate_url }}

If you didn't sign up, ignore this email.

Thanks,
DodaTech
"""

Verification flow control

# Optional — allow resending verification
ACCOUNT_EMAIL_CONFIRMATION_AUTHENTICATED_REDIRECT_URL = '/'
ACCOUNT_EMAIL_CONFIRMATION_ANONYMOUS_REDIRECT_URL = '/login/'

# Optional — set to 'optional' to allow login without verification
ACCOUNT_EMAIL_VERIFICATION = 'optional'

Test verification in development

# python manage.py shell
from allauth.account.models import EmailAddress

# Manually verify an email
EmailAddress.objects.create(
    user=user,
    email=user.email,
    verified=True,
    primary=True,
)

Prevention

• Use ACCOUNT_EMAIL_VERIFICATION = 'mandatory' for production apps.
• Configure a real SMTP backend before launch.
• Test the full flow: register, check console email, click link, verify login.

Common Mistakes with allauth email verify

1. Forgetting that lazy evaluation defers computation until the value is forced, causing space leaks with unevaluated thunks
2. Using return to exit a function early instead of wrapping a pure value in the monad
3. Mixing let bindings with <- bindings in do notation, producing type errors

These mistakes appear frequently in real-world DJANGO code. DodaTech's contributors have identified these patterns through analysis of open-source projects and production systems.

Practice Exercise

Write a pure function that safely divides two integers using Maybe, then test it with edge cases like division by zero and negative numbers.

This exercise reinforces the concepts covered in this guide. Try implementing it before checking online solutions.

FAQ