Setting up Email Login for voting
Email Login makes each voter confirm their email address with a 6-digit code before their vote counts. Turn it on in the Entry Display Widget's voting restrictions, then create the email that sends the code. By default voters re-verify every 30 days; verifying every time needs your own SendGrid account.
Email Login takes more setup than the Anonymous Fingerprint restriction, but it is the most secure way to restrict votes: a vote only counts once the voter enters the code sent to their inbox.
Getting there
There are two ways to open the Email Login settings.
Via campaign settings
- Open the Campaign Builder and click the gear icon at the top.
- In the Campaign Settings pop-up, click Email Login in the left menu.
Via Entry Display Widget settings
- Open the settings for the Entry Display Widget.
- Make sure voting is enabled under the Voting section.
- In the Restrictions section, select Email address from the Restrict votes by dropdown.
- Click the red Configure Email Login button to open the Email Login settings.
Setting up the notification email
The notification email carries the code voters need to confirm their vote.
1. Start configuration
In the Verification code email campaign section of the Email Login settings, click Select....
2. Create a new email
- In the pop-up, click New Email.
- Select a Company Profile and click Continue.
3. Use a template (optional)
- To use the Email Verification Template, hover over the template preview and click Use This Template.
- Or click Continue to start with a blank email.
4. Design the email
Make sure the email includes the {{entry.code}} merge field, which inserts each voter's code. The template includes it already.
5. Configure email details
- Enter the Name, Subject, From Name, and From Email Address.
- Click Continue.
6. Review email settings
Check your settings. Green checkmarks mean a field is complete; a ! icon marks one that still needs attention.
7. Save and activate
Click Save & Activate. A notification confirms the email is active. Click I'm Done to leave the Email Wizard.
Customizing text
In the Email Login settings, two sections control the text voters see. Each has a Prompt Preview on the right that updates as you type.
Prompt for email address
- The field label (default: Email Address).
- The instructions under the field (default: "Enter your email address and we'll send you a 6-digit verification code. It can take a minute to arrive — please check your spam folder if you don't see it.").
- The button text (default: Send Code).
- The error shown when the email address isn't valid.
Prompt for verification code
- The field label (default: Verification Code (valid for 15 minutes)).
- The button text (default: Verify Code).
- The error shown for an incorrect or expired code.
- The error shown after too many incorrect attempts.
How often voters verify
The Verification frequency section asks "How often should visitors verify their email address?" and offers Always verify or Verify every __. It controls how long a verified voter can keep voting before they have to verify again.
- Verify every 30 days is the default for campaigns that send codes through ShortStack. This applies to live campaigns too.
- Any interval longer than 30 days is available on every campaign.
- Always verify, or an interval shorter than 30 days, requires your own SendGrid account connected to ShortStack. See Setting up and connecting SendGrid. If your setup doesn't allow the option you pick, the builder shows a warning.
Each code is 6 digits, expires 15 minutes after it is sent, and works only once.
Finishing the setup
- Go back to the Email Login settings in the Campaign Builder.
- Check that your new email's name appears in the Verification code email campaign section, instead of "No email campaign has been selected".
- Click Save & Exit, then Publish Changes.
When codes don't arrive
- Email Login isn't configured. If the Configure Email Login button is still red, no code email is sent. Finish the setup above and publish your changes.
- The code went to spam or junk. Ask the voter to check their spam or junk folder. When you test, try a second address, such as a personal one, to see whether the problem is one inbox or every inbox.
- The voter's mail provider blocks it. This can happen with Hotmail and Outlook addresses and with company mail: the provider's security settings stop the code email from reaching the inbox. If it's a business or company address, the voter can ask their IT team to add your code email's From Email Address as a safe sender. Otherwise, the voter can use a different email address.
When the code doesn't work
- The code expired. Codes last 15 minutes. The voter can request a new one.
- The voter used an older code. If the voter asked for more than one code, they need to enter the most recent one.
- The code was already used. Each code works once. The voter needs a new code to verify again.
- Too many incorrect attempts. After too many wrong codes, the voter has to wait 5 minutes before trying again.
FAQs
How long is a verification code valid?
15 minutes. Each code is 6 digits and works only once. If a voter asks for another code, only the most recent one works.
What happens after too many incorrect codes?
The voter has to wait 5 minutes before they can try again.
Do voters have to verify every time they vote?
Not by default. Voters verify once every 30 days unless you change the Verification frequency. Choosing Always verify requires your own SendGrid account connected to ShortStack.
Can I export the email addresses people used to vote?
No. Email Login only verifies voters; it does not collect their addresses for you, and data privacy laws prevent us from exporting them without the voter's consent. Support can export anonymized IP addresses for votes. If you want voters' details, ask for them in a form — see How to collect voter data.
What happens to Email Login if my plan changes?
Email Login is a Max plan feature. If your account moves to a plan below Max, for example when a VIP trial ends and you choose Build, Email Login stops working on your campaigns. Upgrade to Max, or switch the widget's Restrict by setting to anonymous fingerprint and publish your changes. See Why can't people vote?
Can I use Email Login for entries as well as votes?
Yes. For entries, add a Login Field to your form and restrict entries by login. See Entry restrictions.
Related resources
Was this helpful?
Thanks — that helps us decide what to fix next.
Sorry this missed. Tell us what you needed and we'll get you an answer — and fix the page.