Skip to content
AskVault Docs
Try Free →

Email verification

Written by , Founder, AskVault · Reviewed by Aashiq
Last updated: · 3 min read

Why verification is required

Three reasons we gate features behind verification:

  • Anti-abuse. Unverified accounts can't index large content or invite team members. Blocks the worst spam patterns within seconds of signup.
  • Deliverability. We send transactional emails (lead captures, weekly reports, billing). Verification keeps the address valid.
  • Trust signals. Verified domains rank higher in trust audits and pass enterprise security questionnaires.

What's locked until verification:

  • Knowledge indexing capped at 5 MB.
  • Only the widget channel deployable. WhatsApp, Slack, SMS, voice locked.
  • Team invites disabled.
  • Webhook endpoints not callable.

After verification, all gates open within 30 seconds.

How verification works

When you sign up:

  1. AskVault sends a verification email within 30 seconds.
  2. You click the link. Link is signed and tied to your account ID.
  3. AskVault verifies the signature, marks your account verified.
  4. You're redirected to the dashboard with the unlock applied.

Total time: under 60 seconds if you're checking email actively.

Verification email contents

The email looks like:

Subject: Verify your AskVault email

Hi {name},

Click the link below to verify your account and unlock all AskVault features.

[Verify my email]

The link expires in 24 hours. If you didn't sign up for AskVault, you can ignore this email.

The link points to askvault.co/verify?token=.... Tokens are single-use; reusing the same link errors out.

Resending verification

If the email doesn't arrive in 5 minutes:

  1. Check spam. Most missed verifications are in the spam folder. Whitelist mailer@askvault.co so future emails route correctly.
  2. Check the email address. If you misspelled at signup, change it under Account Settings > Email.
  3. Resend. Settings > Verify Email > Resend. Up to 5 resends per 24 hours.
  4. Contact support. If still missing, support can verify you manually after a quick identity check.

What changes when you verify

Within 30 seconds of clicking the link:

  • Knowledge indexing cap lifts from 5 MB to your plan's full cap (15 MB Starter, 40 MB Growth, 100 MB Business).
  • All 13 channels become deployable.
  • Team invites enable. Send up to your plan's team-member cap.
  • Webhook endpoints start receiving events.
  • API keys can be generated.

You don't need to log out and back in; the dashboard refreshes automatically.

Verification for team members

When you invite a team member:

  1. They get an invite email with a signup link.
  2. Their signup completes, then they get a separate verification email.
  3. Both must complete before they have full workspace access.

Until the invitee verifies, they show as "Pending verification" in your team list.

Changing your verified email

To change the email tied to a verified account:

  1. Open Account Settings > Email.
  2. Enter the new email. AskVault sends a verification to the new address.
  3. Click the link in the new email. Old email gets a courtesy "this address was unlinked" notice.

Until you verify the new email, the old one stays primary. No outage.

SSO accounts (auto-verified)

If you signed up via Google OAuth or Enterprise SSO, your email is auto-verified at signup. Google and your IdP already confirmed the address. No separate verification step.

Switching from password to SSO doesn't unverify; verification status carries across login methods.

Common pitfalls

Verification email not arriving. Check spam folder, whitelist mailer@askvault.co, then resend.

Link expired. Tokens live 24 hours. Click Resend to get a fresh link.

Link already used. Tokens are single-use. If you already clicked once, you're verified. Refresh the dashboard.

Email typo at signup. Change email under Account Settings; a new verification fires automatically.

Stuck on 5 MB cap after verifying. Hard-refresh the dashboard. If still capped, log out and back in to clear the cached session.

Verification for compliance

Verified email is required for:

  • SOC 2 audit evidence. Every team member must be verified to count toward access controls.
  • HIPAA BAA eligibility. All accounts touching protected data must be verified.
  • GDPR data-processor relationships. Verified email proves contact ownership.

FAQ

24 hours. After that, click Resend for a fresh one.

Can I skip verification and use AskVault anyway?

You can use the limited (5 MB, widget-only) version indefinitely. To unlock indexing, channels, and team features, verification is required.

Can I have an account with an unverified address forever?

Technically yes, but the cap stays at 5 MB and channels other than the widget stay locked. We don't auto-delete unverified accounts; you keep what you have.

What happens if I change to an unreachable email?

You can't verify, so the new email never becomes primary. The old one stays active. Change back, or contact support with proof of ownership for a manual fix.

Does verification expire after some time?

No. Once verified, the email stays verified until you change it.

Was this page helpful?