The standard registration form creates user logins with an email address as the username. The CITIZENCHANGEEMAILEXAMPLE form updates a user's contact email address and login username.
Access
This form is only relevant to users who already have accounts. We recommend making it available via the My Account template.
Security
The first page of the form asks the user to reenter their password before they can proceed to update their username.
New Email and PIN
The user has to enter and confirm their new email address. A PIN is sent to the new address to check that they have access to that email account, in exactly the same way as for registrations and password resets.
If the new email address is already in use as an account login the user will be prompted to go through the password reset process. This check takes place after the PIN has been entered correctly, so we know that the current user has access to the duplicate email login.
Confirmation
The confirmation page displays the user's old and new email addresses. When they confirm the change emails are sent to both.
The user's contact email address and login username are both changed to the new email address.