---
schema_version: "1"
id: 91b28d823ada6c2943aa21bfba5fd72dfed8e3146431108d6d65bc1c8bb9da48
title: Valid Session Is Always Required for Email Address Changes
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_security_email_verification_session.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_email_verification_session.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: c18493cb95ac7832d9dd30f1b115ba1d7afcf1ba07b026b9d568dd3de867d7d8
description: To improve security, Salesforce now requires a valid session for all email address changes. If a user doesn’t have a valid session, Salesforce prompts them to log in to complete the email address change. Previously, Salesforce required a valid session only if the setting “Require identity verification for email address changes” on the Identity Verification page was enabled.
products:
  - Cross Cloud
release: "262"
---
# Valid Session Is Always Required for Email Address Changes

To improve security, Salesforce now requires a valid session for all email address changes. If a user doesn’t have a valid session, Salesforce prompts them to log in to complete the email address change. Previously, Salesforce required a valid session only if the setting “Require identity verification for email address changes” on the Identity Verification page was enabled.

**Where:** This change applies to Lightning Experience and Salesforce Classic in all editions.

**When:** When Salesforce first released this change with Summer ’26, users without a valid session were prompted for [device activation (if applicable based on browser recognition and IP allowlisting)](https://help.salesforce.com/s/articleView?id=xcloud.device_activation_orgs.htm&language=en_US) during their login. Starting in late May 2026, device activation is no longer required for these logins.

**How** Here's how email address changes work based on your identity verification settings.

- If “Require identity verification for email address changes” is enabled: Salesforce prompts users to verify their identity to complete email address changes. If a user doesn't have a valid session, Salesforce prompts them to log in.
- If “Require identity verification for email address changes” is disabled: users can complete email address changes without verifying their identity. If a user doesn't have a valid session, they must log in.

![Identity Verification page in Setup with "Require identity verification for email address changes" setting highlighted](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-release-notes-salesforce_release_notes-262-0-0-production-enus/e945111b-3e0a-4011-accc-d5949363bfcc/salesforce_release_notes/images/security_email_verification_setting.png)

#### See Also

- [_Salesforce Help_: Define Identity Verification Settings for Your Orgs and Experience Cloud Sites](https://help.salesforce.com/s/articleView?id=xcloud.security_auth_setup_identity_verification.htm&language=en_US)