If you previously disabled user email verifications through Salesforce Customer Support, configure an authorized email domain setting to maintain your exception and to preserve your users' ability to send email. When this release update is enforced, Salesforce removes the existing domain allowlists that disable email verification. This update is available starting in Winter '27 and is enforced on December 1, 2026.
Where: This change applies to Lightning Experience and Salesforce Classic in all editions except Database.com. In affected orgs, the Maintain Your Email Verification Exception release update is present on the Release Update page in Setup.
When: Salesforce enforces this release update on December 1, 2026.
Why: This release update affects users' ability to send email from Salesforce. It has no impact on user account verification or the user's ability to log in to Salesforce.
The new Require Address Verification to Send Email field on authorized email domains gives you direct control over email verification settings in Setup, without submitting a case to Salesforce Customer Support. If you set the field to Never for one or more authorized email domains, Salesforce restricts email address updates to protect against impersonation fraud.
If you don't complete the steps in this update, then this behavior is enforced.
- Existing users who haven't verified their email address and return email address can't send email from Salesforce.
- If a user changes their email address or return address in Salesforce, that change takes effect only after the user confirms the new email address.
The Deliverability setting "Verify the ownership of email sending domains by DKIM keys" controls the verification requirement for new email addresses. When turned on, the setting exempts the first email address assigned to a user from verification if an active DomainKeys Identified Mail (DKIM) key exists for the address's domain. However, verification is still required when a user changes their email address, so that setting can’t maintain an exception to address change verification.
How: To review this update, from Setup, in the Quick Find box, enter Release Updates, and then select Release Updates. If the Maintain Your Email Verification Exception release update is present, Salesforce Customer Support disabled email verifications for at least one domain via the previous process. For that release update, follow the testing and activation steps.
If you turned on the Deliverability setting "Verify the ownership of email sending domains by DKIM keys," we recommend that you configure authorized email domains for address verification requirements. Then turn off the Deliverability setting. With that configuration, authorized email domains control address verification, including after an address change, while DKIM keys perform only their primary function: improving email deliverability.