Email not confirmed Authentication Origin: Application & API Last updated 13 Oct 2026

Supabase Auth: AuthApiError: Email not confirmed

The account exists, but email confirmation is enabled and the user hasn’t clicked the confirmation link.

Exact message you may see Email not confirmedAuthApiError: Email not confirmed
Explore the map of this error Full error map →
Seen on: REST API

Meaning

Confirmation emails may land in spam, use Supabase’s rate-limited default SMTP, or redirect to a wrong Site URL. You can resend, configure custom SMTP, or disable confirmation for development.

Common causes

  • User hasn’t confirmed
  • Email not delivered (default SMTP rate limit, spam)
  • Confirmation link redirect URL not allowed

⚡ Quick fix

  1. Resend confirmation (supabase.auth.resend)
  2. Configure custom SMTP
  3. Add your site URL/redirect URLs in Auth settings

Detailed fix by platform

JavaScript

  1. await supabase.auth.resend({ type: "signup", email, options: { emailRedirectTo: "https://app.example.com/welcome" } });

How to diagnose

  1. User — email_confirmed_at null?
  2. Email — Delivered?
  3. URLs — Site URL/redirect allow list

🔧 Still not fixed?

Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:

Where this error sits

Origin: Application & API. Errors that are often confused with or caused by this one (click to open):

auth/invalid-credential — Firebase Auth: auth/invalid-credential (auth/wrong-password, auth/user-not-found, auth/invalid-login-credentials) (Authentication)auth/invalid-credenti…auth/network-request-failed — Firebase Auth: auth/network-request-failed — A network AuthError (such as timeout, interrupted connection or unreachable host) has occurred (Authentication)auth/network-request-…Illegal arguments: undefined, string — bcrypt error: Illegal arguments: undefined, string / data and salt arguments required / data and hash arguments required (Authentication)Illegal arguments: un…Invalid login credentials — Supabase Auth: AuthApiError: Invalid login credentials (Authentication)Invalid login credent…NotAuthorizedException — AWS Cognito: NotAuthorizedException: Incorrect username or password (Authentication)NotAuthorizedExceptionUnable to verify secret hash for client — AWS Cognito: NotAuthorizedException: Unable to verify secret hash for client x (Authentication)Unable to verify secr…UserNotConfirmedException — AWS Cognito: UserNotConfirmedException: User is not confirmed. (Authentication)UserNotConfirmedExcep…Email not…

Explore the map of this error Full error map →

🧠 Still stuck? Analyze your error

Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.

💬 What worked for others

No tips yet — did something else fix this for you?

Share what worked for you

Tips are checked by an editor before they appear. Links are removed.