Confirming Your Security Notifications Email

When you add a secondary email on your profile's Security notifications card, we send a "Confirm your security notification email" message to that address.

Clicking Confirm this email in that message lands you on a dedicated confirmation page — not your dashboard and not the login page. You don't need to be signed in to confirm the address (people often click from a phone or a different browser). The page works regardless.

What the page says

Success: "Security email confirmed. Security notifications will now be sent to [masked address] in addition to your primary account email." Followed by a button to return to your profile.

Expired link: the confirmation link is valid for 24 hours. If you click it later, the page tells you the link expired and asks you to add the secondary email again from your profile to get a fresh link.

Invalid link: if the link has already been used, was truncated by your email client, or was manually edited, you'll see an "Invalid link" message. Same fix as expired — add the address again from your profile.

Address no longer matches: if you added a secondary email, received the link, then changed or removed the address on your profile before clicking, the page tells you the address on file no longer matches what's in the link. Add it again if you still want to use it.

Distinction: this is NOT your login email

The confirmation is specifically for the security notifications email — a second address that receives sign-in alerts and account-change notifications. It is not your primary account email.

• Your primary account email is what you sign in with and what receives password resets. Change it on the Profile tab, not the Security tab.
• Your security notifications email is an optional add-on that gets copied on security events. Add or remove it anytime on the Security tab.

If you ever need to recover access and your primary account email is compromised, the security notifications email is what the "Lost access to your authenticator?" flow uses to reach you. Worth setting up.