Email change verification

This module adds email verification to the user accounts when changing their email.

When a user changes their email address, this module will temporarily save the new value and check if it is already used. If it is not already used, it will send a verification email (configurable) to the new email address with a one-time verification link. Upon using that link the logged in user's email address will be changed to the temporarily stored new address, provided that they are the correct currently logged in user.

If a user wants to change their email address to an email address that is already in use, this won't be shown to end users. Instead, the new email address will get the email - notifying them. The email change will also not happen, but an error will be thrown, since two users with the same email address can't exist in a Drupal site.

This module prevents malicious attempts to gather email addresses with active accounts by trying to change to them.

Other modules worth investigating:

• Email confirmer