Skip to content
Compliance

What is Double Opt-In?

Definition

Double opt-in is a two-step subscription process: a guest submits their address, then confirms it by clicking a link in a verification email. Only confirmed addresses join the marketing list. It proves the address is real and that its owner asked to be there, which strengthens both deliverability and the consent record.

What the confirmation step actually proves

Single opt-in proves someone typed an address into a form. Double opt-in proves the person who controls that inbox agreed to receive mail. That distinction matters in three ways. It filters typos and deliberately fake addresses before they reach your list. It prevents one person subscribing another. And it produces a second, independent consent artefact, a click from the mailbox itself, that is considerably harder to dispute than a form submission alone.

The deliverability argument

Mailbox providers judge senders on engagement, complaints and bounces. A list built from unverified captures accumulates dead addresses and spam traps that quietly push a sender's reputation down until legitimate mail lands in junk. Double opt-in trades some raw signups for a list made only of addresses someone has proved they read. In a venue context, where addresses are typed on phone keyboards in poor light, the typo rate alone justifies verification. The list is smaller and worth more.

Making it work in a WiFi flow

The obvious risk is asking a guest to check email before they have internet. Two patterns solve it. Grant WiFi access immediately on submission and treat confirmation as marketing-list entry only, so the guest can click the link on the connection you just gave them. Or send the confirmation shortly after the visit, framed around something useful rather than a bare "confirm your subscription". Whichever you choose, keep unconfirmed contacts in a separate state, never mail them beyond the confirmation, and clear them out after a defined window.

This is general information, not legal advice. Rules on consent and marketing differ by country and state, so check what applies where you operate.

Run a guest WiFi login on your own network

VoqadoWiFi runs branded guest portals on TP-Link Omada and Ubiquiti UniFi networks. The Starter plan is free forever: one location, 500 logins a month, consent logging included.

Common questions about double opt-in

Is double opt-in legally required?

Generally no. The GDPR requires that you can demonstrate consent (Article 7(1)) but does not prescribe how, and the US CAN-SPAM Act does not require prior consent at all. Double opt-in is a strong way to evidence consent, so treat it as good practice rather than a universal requirement.

Does double opt-in shrink my list?

Yes, in raw numbers. What remains are addresses someone has proved they read, so fewer of your sends bounce or land with strangers. Whether that trade is worth it depends on how much of your marketing runs through email.

Related terms

Double Opt-In rarely comes up on its own. These are the entries operators usually read next.