What Is an Email Verification Code and How Does It Work?
An email verification code is a short, one-time number that proves you can read the inbox you entered. It appears when you sign up, change an address, reset a password or sign in from a new device. Knowing how these codes work explains most of the errors people run into.
What the code proves
When a site sends a code to an address and you type it back, the site learns that the person at the keyboard can read that inbox right now. That is all it proves. It does not prove who you are, and it does not mean the inbox is private.
Some services send a link instead of a code. Opening the link does the same job: it shows the site that you received the message.
Codes and links compared
| Verification code | Verification link | |
|---|---|---|
| What you do | Type 4 to 8 digits into the site | Open the link from the email |
| Works across devices | Yes, read on one device and type on another | Usually opens on the device where you click it |
| Typical lifetime | Minutes | Minutes to a day, set by the sender |
| Main risk | Someone tricks you into sharing it | A fake link in a phishing email |
Why codes expire and stop working
- Short lifetimes limit how long a stolen code is useful. Many services allow only a few minutes.
- Requesting another code often cancels the previous one. Always use the newest message from your latest request.
- Sites limit how often you can request codes, so repeated clicks can trigger a wait.
- Each code belongs to one action. A code from a password reset will not confirm a sign-up.
Use a code step by step
- Make sure the address you entered is correct before requesting the code.
- Request the code once and keep the site open in its tab.
- Open the newest message from the expected sender and check that it matches what you just did.
- Enter the code on the same site and within its time limit.
- If it fails, wait for the resend timer, request one new code and use only that one.
Keep codes private
Never read a code to someone who calls or messages you, even if they claim to be support. Real companies do not need it. If you receive a code you did not request, someone may be trying to use your address; ignore the code and consider changing that account’s password.
On Tempgmail.io, the inbox detects codes so you can copy them with a tap. Because public inboxes can be shared, use that only for short tests and accounts you do not need to protect.
Open the tool and check the address and timer before sending a message.
Open a temporary inbox