Single vs Double Opt-In: Which Should You Use?

The difference between single and double opt-in email sign-ups, the pros and cons of each, what the law says, and how to choose for your list.

In short: Single opt-in adds people immediately and grows your list faster; double opt-in asks them to confirm by email, which removes typos and fake sign-ups and gives you strong proof of consent. Use double opt-in for public website forms if you get junk sign-ups or email people in Canada.

When someone fills in your sign-up form, you have a choice: add them to your list immediately (single opt-in) or ask them to confirm by clicking a link in an email first (double opt-in). Both are legitimate. Here's how to choose.

Single opt-in

The person submits the form and is subscribed straight away.

Pros:

More sign-ups — no extra step.
Instant welcome email while interest is high.

Cons:

Typos and fake addresses get on your list, causing bounces.
Bots can submit forms with other people's addresses.
Someone could sign up an address that isn't theirs.

Double opt-in

The person submits the form, receives a confirmation email, and is subscribed only after clicking the link.

Pros:

Every address is real and belongs to the person who signed up.
Higher engagement and fewer complaints.
Strong proof of consent — useful under CASL and privacy laws.
Protects your sender reputation from bots and typos.

Cons:

Some people never click the confirmation link, so you'll get fewer sign-ups.
The confirmation email can land in spam or go unnoticed.

What does the law require?

Neither the US CAN-SPAM Act nor Canada's CASL strictly requires double opt-in. CASL requires that you can prove consent — double opt-in makes that easy. Some countries and industries effectively expect it.

How to choose

Use double opt-in if:

Your forms are public and could attract bots or fake sign-ups.
You run giveaways (people enter with throwaway addresses).
Deliverability and list quality matter more to you than raw list size.

Use single opt-in if:

Sign-ups come from trusted places (customers at checkout, in person with staff present).
You have strong spam protection on your forms.

Many businesses mix both: single opt-in at checkout, double opt-in on public website forms.

Make double opt-in work better

Tell people on the thank-you page: "Check your inbox to confirm."
Send the confirmation immediately, with a clear subject: "Please confirm your subscription".
Keep the confirmation email short with one big button.
Deliver the welcome reward after they confirm.

A sample confirmation email

Subject: Please confirm your subscription

Hi,

You asked to join the [Business name] newsletter. Please confirm your email address:

[Yes, subscribe me]

If you didn't sign up, just ignore this email — you won't hear from us again.

What to put on the thank-you page

"Almost done! We've sent a confirmation email to you@example.com. Click the button inside to start receiving [what they signed up for]. Can't find it? Check your spam or Promotions folder."

Whichever method you use, keep a record for every subscriber: the form or source, the date and time, and — for double opt-in — when they confirmed. If a customer, a mailbox provider or a regulator ever asks, you can show exactly how each person joined. Under Canada's CASL, the burden of proof is on you.

Re-confirming an old list

If you've inherited a list without clear consent records, don't email it as a normal campaign. Instead, send a single, polite "Do you still want to hear from us?" email with a confirm button to recent customers where you have a legitimate basis, and only keep the people who confirm.

Common double opt-in problems (and fixes)

The confirmation email goes to spam. Authenticate your sending domain (SPF, DKIM, DMARC), use a recognisable sender name and a clear subject such as "Please confirm your subscription to Corner Café". Mention on the thank-you page that people should check their spam or promotions folder.

People don't notice they need to confirm. Make the thank-you page say it clearly: "Almost done — check your inbox and click the link to confirm." A large heading works better than small print.

Confirmation rates are low. Keep the confirmation email short, with one big button and no other links. Send it immediately, while people are still thinking about you.

Typos in the address. Double opt-in catches these automatically, because the confirmation never arrives. Some forms also suggest corrections for common typos such as "gmial.com".

The link has expired. If people confirm days later, allow a generous expiry period, and let them simply sign up again to get a fresh link.

A sensible middle ground

You don't have to choose one method everywhere:

Double opt-in for public website forms and pop-ups, which attract typos and bots.
Single opt-in for customers who sign up at checkout or in person, where the address is already verified by the purchase or entered with staff help.

Whatever you choose, record how and when each person joined.

In Reepio

Turn on double opt-in per form or for your whole workspace under Settings → Compliance. Reepio sends the confirmation email, records when and how each person confirmed, and protects forms with spam traps. Start free.

Frequently asked questions

Is double opt-in required by law?

Not by CAN-SPAM or CASL, but CASL requires you to prove consent, which double opt-in makes easy.

How much does double opt-in reduce sign-ups?

Some people never confirm, so you’ll get fewer subscribers, but the ones you keep are real and more engaged. Clear instructions on the thank-you page help more people confirm.

What happens if someone doesn’t confirm?

They stay unconfirmed and don’t receive marketing emails. You can send one reminder, but don’t keep emailing people who haven’t confirmed.