Double opt-in vs single opt-in: which should you use?

When someone joins your list, you can either add them immediately (single opt-in) or send a confirmation email they must click first (double opt-in, sometimes "confirmed opt-in"). Both are legitimate. They solve different problems.

Single opt-in

The address is added the moment it is submitted.

Pros

• No friction, so more signups
• Simple to build
• The welcome email arrives straight away

Cons

• Anyone can enter anyone else's address
• Typos and fake addresses go straight onto the list
• No proof that the owner of the address agreed

Double opt-in

The person must click a link in a confirmation email to join.

Pros

• Proves the address works and its owner agreed
• Filters out typos, fakes and bots
• Fewer spam complaints and traps
• Gives you a record of consent

Cons

• Some real people never click, so the list grows more slowly
• The confirmation email itself can land in spam
• Extra step to build and test

What the numbers depend on

How many people you lose at the confirmation step varies a lot by audience and offer, so test it rather than trusting a headline figure. Often the people you lose are the least engaged ones anyway, but that isn't guaranteed for every business.

A middle path: single opt-in plus verification

Many teams get most of the benefit without the extra step:

1. Verify the address in real time when the form is submitted. Typos get a "did you mean…?" prompt. Invalid and disposable addresses are rejected with a clear message.
2. Add valid addresses immediately and send a welcome email.
3. Hold back or confirm risky ones, for example catch-all domains and role accounts, with a double opt-in only for that group.

This keeps friction low for the large majority while still protecting your list. See how to add validation to your signup form.

What verification can't replace

Verification tells you an address is deliverable, not that the person who typed it owns it. If consent is a legal requirement for you, or someone could sign up a stranger, confirmation is the only real proof. Read more in email verification and privacy laws.

A quick rule

• Newsletters and low-risk content: single opt-in with verification.
• Regulated, high-volume or abuse-prone lists: double opt-in.
• Not sure: start with verification, watch complaints and traps, and tighten if needed.