# Allow Users to Change Their Email

**URL:** <https://discourse.sst.dev/t/allow-users-to-change-their-email/508>\
**Category:** Chapter Comments\
**Created:** [October 4, 2018, 7:38pm UTC](https://discourse.sst.dev/t/allow-users-to-change-their-email/508 "2018-10-04T19:38:23Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![jayair](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/jayair/32/9_2.png) [@jayair](https://discourse.sst.dev/u/jayair)\
**Post date:** [October 4, 2018, 7:38pm UTC](https://discourse.sst.dev/t/allow-users-to-change-their-email/508/1 "2018-10-04T19:38:23Z")

</div>

Link to chapter - [http://serverless-stack.com/chapters/allow-users-to-change-their-email.html](http://serverless-stack.com/chapters/allow-users-to-change-their-email.html)

---

<div class="post-metadata">

**Author:** ![ankur-zibo](https://avatars.discourse-cdn.com/v4/letter/a/b9bd4f/32.png) [@ankur-zibo](https://discourse.sst.dev/u/ankur-zibo)\
**Post date:** [May 12, 2020, 1:37am UTC](https://discourse.sst.dev/t/allow-users-to-change-their-email/508/2 "2020-05-12T01:37:14Z")

</div>

Great Topic. What if user types his email incorrectly. In this situation user will not be able to verify his email again. How we can handle this scenario.

---

<div class="post-metadata">

**Author:** ![jayair](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/jayair/32/9_2.png) [@jayair](https://discourse.sst.dev/u/jayair)\
**Post date:** [May 17, 2020, 6:35pm UTC](https://discourse.sst.dev/t/allow-users-to-change-their-email/508/3 "2020-05-17T18:35:58Z")

</div>

Well if they cannot verify it, they’ll need to change the email again right?

---

<div class="post-metadata">

**Author:** ![ankur-zibo](https://avatars.discourse-cdn.com/v4/letter/a/b9bd4f/32.png) [@ankur-zibo](https://discourse.sst.dev/u/ankur-zibo)\
**Post date:** [May 17, 2020, 9:04pm UTC](https://discourse.sst.dev/t/allow-users-to-change-their-email/508/4 "2020-05-17T21:04:23Z")

</div>

Yes, That is true.  
I was thinking of the worst case scenario if they leave the authenticated session at that moment and once the session expires they will never be able to come back to the app as their email would have been updated in the Cognito.

---

<div class="post-metadata">

**Author:** ![jayair](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sst.dev/jayair/32/9_2.png) [@jayair](https://discourse.sst.dev/u/jayair)\
**Post date:** [May 30, 2020, 7:07pm UTC](https://discourse.sst.dev/t/allow-users-to-change-their-email/508/5 "2020-05-30T19:07:52Z")

</div>

There isn’t much we can do here outside of asking users to enter their email in again to confirm it.