Single vs double opt-in: Double opt-in adds confirmation before subscription; single opt-in does not. For a public email signup form, confirmation is a useful default unless a verified upstream step already supplies it. Audit the actual signup route before changing the setting, and compare usable subscribers and customer outcomes per original request, not just the size of the list.
A form submission is not necessarily a completed subscription. A stored contact also does not establish a completed subscription or welcome-flow entry. Choosing an opt-in method means deciding where confirmation belongs, then checking that the journey implements that decision.
This guide concerns email subscriptions. SMS rules, account verification and the legal basis for a particular marketing send are separate questions.
What is the difference between single and double opt-in?
Single opt-in subscribes someone after their initial subscription request, without another confirmation step. Double opt-in, also called confirmed opt-in, requires a subsequent confirmation before admission as a subscribed contact.
| Stage | Single opt-in | Double opt-in |
|---|---|---|
| Initial request | Person submits a subscription request | Person submits a subscription request |
| Subsequent confirmation | No additional confirmation step | Person must complete confirmation |
| Subscription | Follows the initial request | Follows confirmation |
| Welcome message | Depends on the welcome setup | Depends on completed admission and the welcome setup |
Single opt-in is still an opt-in. In a permission-based programme, it does not mean entering any address you possess and beginning a campaign.
The extra step introduces a place where requests can remain incomplete. Compared with immediately admitting the same submitted addresses, double opt-in admits only the subset that confirms. That tells you where to measure drop-off; it supplies no universal percentage for how much you will lose.
Confirmation also has limits. It does not establish that someone will buy, remain interested indefinitely or receive every future message in their inbox.
Which method should you choose?
For a public subscription form, start with address confirmation unless a verified upstream step already supplies it. Google’s sender guidance advises mailing-list operators to confirm each recipient’s email address before subscribing them. Spamhaus recommends confirmed opt-in and identifies mistyped, bot-submitted and maliciously submitted addresses as risks of unconfirmed collection.
Apply that guidance to the whole signup journey:
| What the route does | Decision to investigate |
|---|---|
| Public form accepts unconfirmed subscription requests | Add confirmation and check that the journey works |
| Upstream form already confirms the subscription | Verify the handoff before adding a second confirmation |
| Confirmation exists, but few requests become subscribers | Audit delivery, instructions, the link and admission first |
| Collection controls or sending requirements are unclear | Resolve those before choosing a method from list-growth figures |
The distinction between verification and permission matters. For UK electronic-mail marketing relying on consent, the ICO requires a free, specific, informed and unambiguous choice covering the sender and channel. Its example accepts an initially unticked email-marketing box that the person chooses to tick; that example does not prescribe a second confirmation email.
It also says to record who consented, when and how, and to stop that marketing if consent is withdrawn. A useful collection record therefore includes the signup wording, source and request time, subscription state, any confirmation time, and withdrawal state. A confirmation click cannot repair an unclear original request.
This UK example does not decide every jurisdiction’s rules. Use the email consent guide for the separate assessment of whether a particular send is permitted.
What should you audit before disabling confirmation?
Follow a new address you control through the actual collection route. Check the form result, confirmation message, link, subscription state and expected welcome email separately.
Use this signup audit card:
| Check | What to record |
|---|---|
| Entry point | Exact popup, hosted form, checkout or integration used |
| Destination | Intended list and the opt-in rule that actually applies |
| After submission | Instructions shown and any stored profile or pending state |
| Confirmation | Whether the message arrived, where it appeared and whether its link works |
| After confirmation | Whether the intended subscription state changed |
| Welcome | Whether the expected welcome message followed admission |
In Klaviyo’s documented process, inspect the destination list’s Settings → Consent. Changing the account default does not update existing lists, and list imports do not trigger double opt-in. Its signup-form route can create a profile for someone who has not confirmed without adding them to the list. That profile is not evidence of completed admission.
The same guide describes avoiding duplicate confirmation when a third-party form already supplies it. Verify the upstream confirmation and handoff before treating a second message as necessary.
Mailchimp’s guide limits its email double-opt-in option to its own signup forms; an integration or API needs separate investigation. Its signup thank-you page tells people to check their email, and its confirmation message carries the unique URL needed for subscribed admission. The optional final welcome email is disabled by default and follows confirmation when enabled.
Those distinctions give you different repairs: clarify a missing inbox instruction, investigate a missing confirmation message, fix a broken link or check the welcome setup after subscription succeeds. Disabling confirmation is not a diagnosis of which step failed. For message-delivery problems, use the deliverability guide; for what to send after admission, use the welcome-flow guide.
How do you compare subscriber growth fairly?
Keep the starting population visible. A higher customer rate among admitted subscribers can coexist with fewer customers per original signup request.
Consider invented results for two routes, each beginning with 1,000 unique new subscription requests. Use the same chosen observation window. Here, a customer means someone with an observed order in that window, not a sale proved to have been caused by email.
| Measure | Single-step route | Confirmation route |
|---|---|---|
| Original requests | 1,000 | 1,000 |
| Admitted subscribers | 1,000 | 700 |
| Observed customers | 100 | 84 |
| Customers ÷ admitted subscribers | 100 ÷ 1,000 = 10% | 84 ÷ 700 = 12% |
| Customers ÷ original requests | 100 ÷ 1,000 = 10% | 84 ÷ 1,000 = 8.4% |
The confirmation route has a higher subscriber-level customer rate and fewer observed customers per starting request. Neither row alone selects a real-world winner: the audiences may differ, orders need not result from email, and these invented counts establish no deliverability or profitability advantage.
For your own evaluation, record unique new requests, admitted subscribers, confirmations where applicable, delivery failures, complaints and observed customer outcomes by collection route. Choose the observation period to suit the outcome you need to see, then keep its definition consistent across the comparison.
What should you change next?
Write down the admission rule before editing a toggle: which step confirms the subscription, what state permits marketing, and what starts the welcome message? Then use the audit card to find the break.
If address confirmation is needed, fix its implementation. If a verified upstream step already supplies it, avoid duplicating it. Assess a policy change from the route’s actual outcomes and risks rather than treating either a larger list or a higher subscriber-level rate as success by itself.
Do not manually label unconfirmed requests as confirmed just to fill a campaign audience. Any additional outreach needs a separate check of the applicable sending basis and platform policy. Handling contacts already in your programme is a different task, covered in the list-cleaning guide.
FAQ
Is double opt-in legally required for every email list?
Do not infer a worldwide rule from an email-platform setting. The ICO’s UK consent example accepts an initially unticked email-marketing box that someone actively ticks, without prescribing a second confirmation email. Check the applicable jurisdiction and sending basis separately from your address-verification method.
Will turning on double opt-in confirm an imported list?
Not in Klaviyo’s documented list-import process: imports do not trigger double opt-in. Check the import route and existing permission record rather than assuming the setting confirms older contacts.
Is a confirmation email the same as a welcome email?
No. Confirmation completes the subscription step; a welcome message introduces the programme after admission, according to its setup. A successful confirmation does not prove that a welcome message has been enabled.
Can you send campaigns to people who never confirmed?
A pending request does not satisfy a confirmation gate. Do not manually bypass it to fill the audience. Whether separate outreach is permitted depends on the applicable sending basis and platform policy; a stored profile alone does not answer that question.