How to set up user verification in Bubble

The simplest way to set up user verification in Bubble is to use the built‑in Send confirmation email action during signup, then protect your app with Privacy Rules and conditions that check Current User's email confirmed is "yes". Bubble handles the confirmation link and the token automatically, so you only need the workflow step and the check.

Email Verification Setup (Bubble’s built‑in method)

This is Bubble’s native and most reliable method. Bubble automatically generates a secure confirmation link and updates the field Email confirmed on the User.

• In the signup workflow, add the action Send confirmation email. This sends a unique verification link to the email the user entered.
• Create a page like verification\_complete (optional). Bubble will load this page when the user clicks the link.
• After clicking the link, Bubble marks Current User's email confirmed = yes automatically. You don’t need to update it manually.
• In your app, protect pages/elements by adding conditions like: When Current User's email confirmed is "no" → hide or navigate them away.

Privacy Rules

Go to Data → Privacy and make sure sensitive data is only visible to users whose Email confirmed = yes. This prevents unverified users from accessing data through API calls or inspector tools.

• Create a rule on the User type: allow access only when This User is Current User and Current User's email confirmed is "yes".
• Do the same for other data types if needed.

Optional: Custom Verification Logic (SMS or code)

If you prefer a code‑based flow (using Twilio, email code, etc.), you store a temporary field on User like verification\_code and compare it.

// Example field values saved on the User
verification_code = 827194
verification_expiration = Current date/time + 10 minutes

• Send the code to the user (email or SMS).
• On the verification page, check if the code matches and is not expired.
• If valid, set a field like is\_verified = yes.
• Use this field the same way you would use Bubble’s built‑in email confirmed.

This setup uses Bubble's real features, avoids unnecessary plugins, and works reliably for production apps.