Home Knowledge Base Get Started Why do I need to confirm my login via email?

Why do I need to confirm my login via email?

Robert Oosterloo
Updated on · 4 min read

If you log in from a location where you haven’t logged in before, your website will ask you to confirm this first via an email. It may seem cumbersome, but it keeps intruders out, even if they have your password. Here you can read how it works and what you need to do.

In short

  • When you log in from a new IP address, you will first receive an email with a confirmation link.
  • In the email, you choose: Trust this location permanently or trust the location for 7 days.
  • The links in the email are valid for 1 hour. After that, you log in again.
  • This applies only to people who can modify the website, not to customers of a webshop.

Why this extra step?

A password can leak, for example, if you use it elsewhere. With just that password, an intruder cannot do anything on your website: they also need access to your mailbox to confirm the new location. Your website recognizes a location by the IP address of the internet connection you log in with.

Who does this apply to?

The check applies to anyone who can change something on the website: administrators, editors, authors, writers, and in a webshop, also store managers. Customers of a webshop who only view their orders can log in directly.

The check is enabled on your live website. You won’t encounter it on a test version of your site.

Nog geen website op leflite?

Wij bouwen hem samen met jou. Daarna pas je alles zelf aan, precies zoals in dit artikel.

  • Online binnen een week
  • Hosting, SSL en back-ups inbegrepen
  • Vanaf €49,95 per maand
Inspirare Coaching website on a laptop

Step 1: Log in as usual

Go to the login screen and log in with your username and password (see logging in to your website). If your location is new, you won’t access the dashboard but will see this message:

“You are logging in from a new IP address. We have sent you an email with a confirmation link: open it, choose how long you trust this location, and then log in again. Did not receive an email? Log in again after 15 minutes for a new one.”

You will receive an email at the email address of your account, with the subject being the name of your website and New login location detected. The email contains the IP address from which you logged in.

Step 3: Choose how long you trust this location

Was it you? Then choose one of the two links:

  • Trust this location permanently: for a fixed place, like your office or home.
  • Trust this location for 7 days: for a place where you are just for a short time, like a hotel or a client’s wifi.

Step 4: Log in again

After clicking, you will see the page Location confirmed, with text stating that this IP address is trusted permanently or for 7 days. Click on Go to the dashboard and log in again. Now you will be able to enter.

Note:Did you receive this email while you were not trying to log in? Then do not click on the links. Someone else knows your password: change it immediately via your profile and let us know.

Good to know

Home, at the office, and on your phone are different locations

Each internet connection has its own IP address. If you work at the office, at home, and on your phone via 4G, you will confirm three locations. On a mobile network, the IP address often changes; the question may come up more frequently there. A new router or a different internet provider also gives a new address.

Locations that you haven’t used for 6 months will expire

A trusted location from which you haven’t logged in for 6 months will be automatically removed. A temporary location expires after 7 days. After that, the website will ask for confirmation again.

View your trusted locations

In your profile (top right on your name, then Profile) there is the block Trusted IP addresses, with the status and last login for each address. There you can also Remove an address.

Having trouble?

  • Did not receive an email: check your spam. Only after 15 minutes will the website send a new email if you log in again; trying again earlier will not send a new email.
  • “Link invalid”: the link is older than an hour or has already been used. Log in again to receive a new one.
  • The question keeps coming back: your internet connection is changing IP addresses (often with mobile internet or a VPN). Then choose for 7 days, or have an administrator add your fixed address in your profile.
  • You cannot access the mailbox of your account: have a website administrator change the email address in your profile, or contact us.
  • A new colleague will be asked at their first login: that is normal. See also adding a user.

Read more about how to keep your site secure in keeping your website secure and up-to-date.

Frequently Asked Questions

Do I have to do this every time?

No. Only at a new location, or if the 7 days have passed.

Do customers of my webshop have to do this too?

No. Only users who can modify the website receive this check.

Share this article

Robert Oosterloo

Robert Oosterloo is eigenaar en UX/UI-designer van Lef Creative in Kollum. Hij ontwerpt websites, webshops en software voor ondernemers in Noord-Nederland.

Read also

Want a website like this?

Here you can read how easy it is to maintain a leflite site yourself. Want one too? We will think along with you, no strings attached.

Prefer direct contact? Call Robert at 06 35 66 47 73 or send a .