# Double opt-in: what it is and why your list needs it

Double opt-in means a new subscriber enters their address, then clicks a link in a confirmation email before they join your list. Your list needs it because it proves each address works and that its owner asked to be there. Google’s sender guidelines recommend confirming addresses for the same reason. The cost is that some people never click.

Last reviewed 30 October 2026. Web page: https://chapbook.ink/guides/double-opt-in-why-your-list-needs-it/

## How it works

Mailchimp’s description is a clean one: a person fills in the form, “they’ll receive a confirmation email or text message and click a link to verify”, and only then are they added as a subscribed contact. Until that click, they are not on your list and you can’t send them newsletters. Beehiiv’s word for that state is Pending, and it says such subscribers won’t get any email, its welcome sequence included, until they confirm.

## What it protects you from

Three kinds of bad address get stopped at the door:

- **Typos.** Someone means `gmail.com` and types `gmial.com`. Without the confirmation step you keep sending to an address that doesn’t work.
- **Someone else’s address.** A person signs up with an address that isn’t theirs, and its real owner starts getting mail they never asked for. That person has every reason to press the spam button.
- **Bots.** Automated scripts fill in open forms. Until something clicks the link, those addresses stay off your list.

The last two matter because of how inbox providers judge you. Google’s email sender guidelines, under “Make it easy to subscribe”, list “Confirm each recipient’s email address before subscribing them” as a way to keep recipients engaged. The same page asks senders to keep the spam rate in Postmaster Tools below 0.10% and to avoid ever reaching 0.30%, as checked on 30 October 2026. At those rates a handful of complaints on a small list can count, so a small list has the most to gain from keeping out people who never asked.

## What the law says

Double opt-in is rarely written into law, and the rules differ by country.

- **The EU.** GDPR Article 7(1) says a controller relying on consent “shall be able to demonstrate that the data subject has consented”. It doesn’t say how. A confirmation click with a date is one record you can keep. Mailchimp notes that audiences with an EU primary contact address may already use double opt-in by default.
- **The United States.** The FTC’s guide to CAN-SPAM describes a right to have you stop emailing: a clear way to opt out, honored within 10 business days, and a valid postal address in each message. It doesn’t list opt-in as a requirement.

This guide isn’t legal advice. If your list reaches people in the EU, or you work in a regulated field, ask someone who knows your case.

## What it costs, and when to skip it

The honest cost is the people who don’t click: the email went to spam, they got distracted, or they only wanted the file. You will have a smaller list, and every address on it will be someone who responded to you once already.

Single opt-in can make sense where the address is already proven some other way, as with a customer who just paid. If you do run it on an open public form, watch your complaints and your bounces, and remove addresses that have never opened anything.

## How the tools handle it

| Tool | What its help page says |
|---|---|
| **Mailchimp** | Offers both methods and lets you enable double opt-in per audience. It “can only be enabled for Mailchimp signup forms”; API sign-ups are set up separately |
| **MailerLite** | “When you create a form, double opt-in is already enabled by default.” API and integrations have a separate setting, **Double opt-in for API and integrations** |
| **Beehiiv** | Subscribers awaiting confirmation are Pending and get no email until they click |
| **Kit** | Each form has a confirmation email. Subscribers must click it to be confirmed unless **Auto-confirm new subscribers** is on, and turning the email off turns double opt-in off too |

## Where Chapbook fits

Chapbook collects sign-ups on a book’s public page and never sends a reader an email, a confirmation included. Each sign-up lands in your Readers list marked unconfirmed, and the exported CSV says so too.

Export the list as a CSV and import it into Kit, Mailchimp, Beehiiv, MailerLite or any other email tool, which can ask each reader to confirm. The [Readers chapter of the manual](/manual/readers/) has the steps.

The sample on this page is a guide to the welcome sequence that follows the click. Its chapter on the first email separates the confirmation, which is plumbing, from the first email a subscriber actually reads.

## What to do

1. **Turn it on in your email tool.** Check every way people join, not only your main form. Tools often treat forms, imports and API sign-ups differently, so one setting may not cover them all.
2. **Rewrite the confirmation email.** Name the book or newsletter they asked for in the subject line. Keep it to one sentence and one button, because it has a single job.
3. **Tell people on the page.** After the form, say an email is on its way and from what name. Ask them to look in spam if it hasn’t come in a few minutes.
4. **Nudge once.** If your tool can send a reminder to people who haven’t confirmed, send one. Beehiiv calls its version Smart Nudge and recommends sending it 48 hours later.
5. **Watch the confirmed count.** Compare sign-ups with confirmations for a few weeks. If the gap is wide, test the email on your own phone before you blame the setting.

## Made with Chapbook: The Welcome Sequence

The Welcome Sequence: Seven emails that turn a subscriber into a reader, by Dana Okafor. Lead magnet, 3,626 words, 17 pages. A sample generated from one brief and exported unedited; it is not a customer's book. Read every page: https://chapbook.ink/examples/newsletter/

The brief:

> A seven-email welcome sequence for a new newsletter: what each email does, what to write, and when to send it. Promise: By the end you have a complete seven-email welcome sequence drafted, with a send schedule. Reader: Someone with fewer than a thousand subscribers who writes the newsletter themselves. Voice: Second person, warm and direct, worked examples with fictional newsletters, no invented open-rate statistics.

The outline the planner proposed:

1. Introduction (282 words)
2. Email 1: The one they actually open (681 words)
3. Emails 2 and 3: Who you are and what to expect (729 words)
4. Emails 4 and 5: Your best two pieces, reframed (669 words)
5. Emails 6 and 7: The ask, and the door left open (743 words)
6. The schedule and the template (478 words)

## Questions

### What is the difference between single and double opt-in?

Single opt-in adds an address as soon as it is entered. Double opt-in adds it only after its owner clicks a link in a confirmation email.

### Does the GDPR require double opt-in?

Article 7 doesn’t name it. It says you must “be able to demonstrate” that a person consented, and a dated confirmation click is one way to show that. Ask a lawyer about your own case.

### Does CAN-SPAM require double opt-in?

No. The FTC’s compliance guide, as checked on 30 October 2026, describes a right to opt out and a physical address in each message. It doesn’t list opt-in consent as a requirement.

### Does double opt-in lower sign-ups?

Yes, by however many people don’t click. There is no one figure that holds for every list, so measure your own sign-ups against your confirmations.

### Is confirmed opt-in the same as double opt-in?

Yes. Both mean the address is confirmed from an email before the person joins the list.

### Does Chapbook send a confirmation email?

Chapbook sends none. Sign-ups wait in Readers, unconfirmed. Export the list as a CSV and import it into Kit, Mailchimp, Beehiiv, MailerLite or any other email tool, which can ask each reader to confirm.

## Sources

- [Google, “Email sender guidelines” (checked 30 October 2026)](https://support.google.com/a/answer/81126)
- [Mailchimp, “About double opt-in” (checked 30 October 2026)](https://mailchimp.com/help/about-double-opt-in/)
- [MailerLite, “How to use double opt-in when collecting subscribers” (edited 1 December 2025)](https://www.mailerlite.com/help/how-to-use-double-opt-in-when-collecting-subscribers)
- [Beehiiv, “Subscriber status types” (updated 1 October 2026)](https://www.beehiiv.com/support/article/12428998664471-subscriber-status-types-in-beehiiv)
- [Kit, “The Confirmation Email” (checked 30 October 2026)](https://help.kit.com/en/articles/2502655-the-confirmation-email)
- [GDPR, Article 7, “Conditions for consent”](https://gdpr-info.eu/art-7-gdpr/)
- [US Federal Trade Commission, “CAN-SPAM Act: A Compliance Guide for Business”](https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business)