Skip to content

Email Verification

When someone signs up through the plugin’s auth form, Ignition Crowdfunding asks them to confirm their email address before they can log in again. The same activation-link mechanism is used to let guest backers claim their account and set a password.

When a visitor registers through the auth form, the plugin:

  1. Creates the account and logs the user in for the current session.

  2. Marks the account as pending verification.

  3. Sends a verification email titled “Verify your email for {site_name}” containing a single-use activation link.

  4. Redirects the user to a confirmation page that reads:

    Check your email Thanks — please check your email to verify your address. You can continue using the site in the meantime.

The user can keep using the site in the same session (for example, completing the pledge they just signed up to make). Verification is enforced when they next try to log in.

The link opens the auth form in verify mode. On success the user sees:

Email verified! Thanks for confirming your email address. You are now logged in.

A Go to your dashboard button appears when a dashboard page is configured.

If the link has been used or has expired, the page shows:

This verification link is invalid or has expired. Enter your email address below and we will send you a fresh verification link.

A Resend verification email form is shown inline.

If a pending user tries to log in, the auth form blocks the attempt with:

Please verify your email address before logging in.

The login form then shows a Resend verification email button so the user can request a new link without leaving the page.

Pending users who reach the frontend dashboard see a notice at the top of the dashboard:

Please verify your email address. Check your inbox for the verification link. [Resend verification email]

The notice disappears the moment verification completes.

Pending accounts that never get verified are removed automatically. The plugin runs a daily cleanup job that deletes any user who:

  • Has been in pending state for more than 30 days, and
  • Has never made a pledge.

Accounts that have pledges are never removed by this job, even if their email is still unverified — pledge data takes precedence.

Guest backers (created through guest checkout) start without a password. The plugin invites them to claim their account so they can return later and view their pledge history.

The pledge confirmation email sent to the backer includes a Claim my account call to action:

Claim your account Set a password to manage your pledges and view your pledge history. [Claim my account]

If the guest never opens that email, the plugin can also send a standalone “Claim your account” reminder email, and a guest who navigates to the auth form can request a claim link from there directly.

A guest who lands on the auth form with ?action=claim_request sees:

Claim your account Enter the email you used to pledge. We’ll send you a link to set a password and claim your account.

After submitting, they receive an email titled “Claim your account on {site_name}” with a single-use activation link.

The activation link opens a Set your password form:

Choose a password to finish claiming your account.

The password field shows a strength meter and a show/hide toggle; submission is blocked while the password is rated Weak. After submitting, the guest is automatically logged in and redirected to the dashboard. The “Guest” marker is removed from their account, but their existing role (Campaign Backer) and pledge history are preserved.