spec 1 linked patterns checked
NIST SP 800-63B email confirmation code distinction
Distinguishes email confirmation codes used to validate email addresses from authentication processes, while cautioning that email is not an out-of-band authenticator for authentication.
Read with a purpose
What this source can teach
Use this source to check a technical or accessibility requirement against its exact wording and scope.
- Start with the original. Open the source and find the guidance or example relevant to your task.
- Trace the connection. Use the claim notes below to see how this site applies the source to specific patterns.
- Check the setting. Compare the source's platform, people, and constraints with your own decision.
Pattern Decisions This Source Supports
| Pattern | Supported decision | Required contract | Claim note |
|---|---|---|---|
| Confirm email | Choose confirm email when the service must prove that the user can access the mailbox for account activation, recovery, sensitive notifications, invitation acceptance, or a verified contact route. | The confirmation page states which email address is pending and why access to that mailbox is required. | NIST distinguishes confirmation codes sent to validate email addresses from authentication processes. |
Comparisons supported by this source
- Confirm email vs email address entry vs account creation vs password reset
NIST distinguishes email confirmation codes for validating email addresses from authentication processes.
Evidence Role
This source is treated as spec evidence. Its value comes from the specific claims and setting described above.
Publisher: National Institute of Standards and Technology. Last checked: .