report/security/report security check emailchangeconfirmation

Main page ► Managing a Moodle site ► Security ► Security overview report ► report/security/report security check emailchangeconfirmation

Security

• Security recommendations
• Security overview report
• Site security settings
• Password salting
• Increasing privacy
• Reducing spam
• Security FAQ

You should generally always force users to confirm email address changes (by ticking the emailchangeconfirmation checkbox in Settings > Site administration > Security > Site policies) via an extra step where a confirmation link is sent to the user.

See also

• Using Moodle Security and Privacy forum