Template
Confirmation email template for double opt-in
Last reviewed 18 September 2026 by Tan Gravam
A confirmation email has one job: get one click from the person who just typed their address. So it names the specific thing they asked for, says what arrives and when, carries exactly one link, and contains nothing else. Three variants are written out below, plain, warm and for a list you imported, along with what must never be in one and how long the link should stay valid.
Most unconfirmed addresses are not refusals. They are people whose confirmation email arrived looking like a phishing attempt, or said "Confirm your subscription" with no clue what the subscription was, or landed in a promotions tab thirty seconds after they had closed the tab they signed up in. The copy below is written against those three failures. Take it, replace the placeholders, and send it within seconds of the form being submitted.
Variant 1: the plain confirmation
Subject: Confirm your place on [the course title]. Preheader: One click and the first email arrives tomorrow morning.
Body: You asked to join [the course title], a [five]-day email course on [the thing you teach]. Click the button below and you are in. The first of the [five] emails arrives tomorrow morning; the rest follow one a day after that, and then they stop. If you did not ask for this, ignore this message. It is the only one you will get, and nothing else is sent to this address unless you click.
The link: [Confirm and start the course]. Underneath it, the same URL again as plain text, on its own line, so a reader who does not trust buttons has something to copy and a client that strips them still has something to click.
Why this email is shaped this way: every sentence is load-bearing. The course is named, because the reader closed your page and may have signed up for three things this week. The schedule is stated, because surprise about frequency is a common cause of complaints. The last two sentences are the promise that makes confirmation honest rather than a hurdle, and they are also what a reader needs in order to feel safe ignoring a message they did not expect.
Variant 2: the warm confirmation
Subject: Nearly in. One click for [the course title]. Preheader: Then I will leave you alone until tomorrow morning.
Body: Hello. [Your name] here. You have just asked for [the course title], which is [five] short emails about [the thing you teach], one a morning, starting tomorrow. There is one click between you and day one, and it is the button below. I ask for it because it proves the address is really yours, which keeps this list clean and keeps my mail out of everybody else’s spam folder. If this was not you, do nothing at all and you will not hear from me again.
The link: [Yes, send me day one]. Same URL repeated as plain text below it, same reason as in the plain variant.
Why this email is shaped this way: the warm variant costs a few words and buys recognition, which is what the reader is short of at this exact moment — they closed your page a minute ago and this message is from a name they have never seen in a From line. A named human in the first line makes that From address make sense. Explaining why the click is being asked for converts the step from an obstacle into a reason, which is the argument for the extra sentence; nobody publishes a figure for what it is worth, so treat it as reasoning rather than as a measurement. The tone can be anything you like as long as the four facts survive: who, what, when, and what happens if they do nothing.
Variant 3: re-permission for an imported list
Subject: Do you still want to hear from me? Preheader: One click to stay. Otherwise this is the last email.
Body: You are on a list I have been keeping since [when and where they signed up: a form, a purchase, an event]. I am starting [the course title] and I do not want to send it to anyone who did not ask for it, so I am asking once. Click below to stay on the list and get the course. Do nothing and I will remove your address, and this will be the last message you receive from me. No hard feelings either way.
The link: [Keep me on the list]. Plain URL underneath. Nothing else in the message: no offer for staying, no survey, no second link.
Why this email is shaped this way: a re-permission message is the only one of the three that has to admit where the address came from, because the reader does not remember. Naming the source is what turns a message that looks like spam into one that looks like a sender being careful. The commitment to delete on silence is what makes it defensible, and it has to be honest: if you send this and keep mailing the people who ignored it, you have converted a list with weak consent into a list with documented weak consent. Expect a large majority not to click; that is the information you were missing.
What must not be in a confirmation email
A confirmation email is measured by one number, the share of recipients who click the one link, and everything else in the message competes with that number.
Leave all of this out, however tempting:
- The content itself. If day one is in the confirmation email, the click has no purpose, and an address that never confirmed has now received the course. The whole promise of confirmed opt-in is that an unconfirmed address receives exactly one message, ever.
- An offer, a discount or a product mention. A second call to action does not add a conversion, it splits the first one.
- A second link of any kind: your social accounts, your other course, a preferences page, an unsubscribe link. There is nothing to unsubscribe from yet, and an unsubscribe link here mostly harvests people who would have confirmed.
- Images doing the work of text, or a link whose visible text is a raw tracking URL. Both read as phishing, and phishing is the exact thing a stranger is deciding about when they open this message.
Timing: seconds to send, hours to expire
Send it within seconds of the form being submitted, not on a cron, and say on the page that it is on its way. The confirmation rate falls with every minute of delay because attention decays fast: a reader who is still on your site will go and look, and a reader who has moved on will not. If your sending path can be slow, this is the message to make the exception for.
Expire the link, but not quickly. Somewhere between 24 and 72 hours is the usual window, and it exists so that a link forwarded or archived cannot be clicked into a subscription months later by somebody else. Make the expiry page useful rather than a dead end: say the link has expired, and offer a form to start again with the address already filled in.
Do not send a second confirmation automatically. One unrequested message to an address that never asked for it is the entire budget confirmed opt-in gives you, and a reminder spends a budget you do not have on somebody who may never have typed the address. If you want to recover the unconfirmed, recover them where they signed up: on the page, in the same session, by saying clearly that the email has been sent and what to look for.
Common questions
What should a confirmation email say?
The name of the specific thing the reader asked for, what arrives and when, one link to confirm, and one sentence saying that nothing further will be sent if they do nothing. Nothing else. A reader who signed up thirty seconds ago on a page they have already closed still needs telling what this is.
What subject line works for a confirmation email?
One that names the thing and the action: "Confirm your place on [the course title]" beats "Please confirm your subscription", because the second could be from anyone. Put the payoff in the preheader, along the lines of "One click and the first email arrives tomorrow morning".
Should I send a reminder if someone does not confirm?
No, not automatically. The promise that makes confirmed opt-in meaningful is that an unconfirmed address receives exactly one message ever, and a reminder breaks it for the addresses most likely never to have asked. Recover the unconfirmed on the sign-up page instead, in the same session.
How long should a confirmation link stay valid?
Usually between 24 and 72 hours. The expiry stops a forwarded or archived link being clicked into a subscription months later by somebody else. Make the expired-link page offer a way to start again with the address prefilled, rather than being a dead end.
Write the confirmation email with the same care as day one of the course, because for a sizeable share of the people who sign up it is the only thing you will ever send them. Name the course, state the schedule, one link, nothing else.
Sources
Read next
This page is part of Email deliverability for small senders: what decides it, which is the complete guide to the subject.
- Email deliverability for small senders: what decides it
What deliverability is, how SPF, DKIM and DMARC fit together, and what the Google and Yahoo bulk sender rules require of a small sender.
- Why your emails go to spam, and how to fix it
The eight checks worth making, in order: what actually happened, what the refusal said, authentication, complaints, who you sent to, and only then the writing.
- Gmail, Yahoo and Outlook bulk sender rules, and CAN-SPAM
What Gmail, Yahoo and Outlook.com require of bulk senders, what CAN-SPAM requires of every commercial email, and how to check each rule yourself.
- Single vs double opt-in: what each costs, and when
Single vs double opt-in: what each does, what confirmation costs in sign-ups, why the mailbox providers settled it, and when single opt-in is still right.
- How to import an email list into new software
Whether you may mail a list you already have, what to strip before uploading it, and why a re-permission message beats a straight transfer.
- GDPR and email courses: consent, records, and erasure
What the GDPR text actually requires for an email list: consent under Art. 4(11), the burden of proof in Art. 7(1), erasure under Art. 17.
These guides are about the format rather than about any particular tool. What this site itself does is on the home page, and the rest of the set is on the guides index .
Elsewhere on this site
The rest of this site comes at the same subject from other directions: guides on the format itself, a tool for one job each, a page for each kind of work, what to check when choosing software, the courses people have actually published here, and one definition or figure at a time.
Free tool
Email subject line testerFree tool
SPF, DKIM and DMARC checkerDefinition
Re-permission campaignDefinition
Seed listDefinition
Soft opt-in
Thinking of writing an email course?
5dayemail hosts a five-to-ten day email course: you write it once, and everyone who joins your list gets one email a day, in order, starting from the day they confirm.
Sign in with Google and your account opens on the Free plan. There is no card to enter, and nothing is charged unless you choose the paid plan.