# Supabase Auth: AuthApiError: Email not confirmed

**Code:** `Email not confirmed` · **Category:** Authentication · **Seen on:** REST API

The account exists, but email confirmation is enabled and the user hasn’t clicked the confirmation link.

## Meaning

Confirmation emails may land in spam, use Supabase’s rate-limited default SMTP, or redirect to a wrong Site URL. You can resend, configure custom SMTP, or disable confirmation for development.

## Common causes

- User hasn’t confirmed
- Email not delivered (default SMTP rate limit, spam)
- Confirmation link redirect URL not allowed

## Quick fix

1. Resend confirmation (supabase.auth.resend)
2. Configure custom SMTP
3. Add your site URL/redirect URLs in Auth settings

## Detailed fix by platform

### JavaScript

1. `await supabase.auth.resend({ type: "signup", email, options: { emailRedirectTo: "https://app.example.com/welcome" } });`

## How to diagnose

1. **User** — email_confirmed_at null?
2. **Email** — Delivered?
3. **URLs** — Site URL/redirect allow list

---
Source: [WhatIsMyError](https://whatismyerror.com/errors/auth/supabase-email-not-confirmed)