Login blocked by email verification: verification enforcement and resend flows

TL;DR: New users who cannot log in right after signup are usually parked behind email verification. The fix is a resend flow, not a support ticket. Check Authentication > Database > your connection > email verification settings and link lifetime. Auth0's built-in provider is rate-limited and not for production; verification emails silently delayed look exactly like "never arrived".

The fix

1. The tenant requires verified emails (an Action/Rule enforcing event.user.email_verified, or the connection setting).
2. The verification email went to spam, or the built-in Auth0 email provider delivered slowly, or the link expired (links expire after a configurable period).
3. Provide a "resend verification email" button in your app calling the Management API POST /api/v2/jobs/verification-email with the user_id. Do not make users re-sign-up.
4. Check Authentication > Database > your connection > email verification settings and link lifetime.
5. For production, configure a custom email provider (SendGrid/SES/etc). Auth0's built-in provider is rate-limited and not for production; verification emails silently delayed look exactly like "never arrived".
6. If the product should allow login before verification, change the enforcement Action to warn instead of deny, but gate sensitive actions on email_verified.
7. Tenant logs: look for the verification email job events and the failed login with the verification description.
8. Dashboard > User Management > user detail shows email_verified true/false directly.
9. Resend flow exists before users ask.
10. Custom email provider configured for production.

When to use this

• This covers exactly what the title says: Login blocked by email verification.
• You are setting this up for the first time, or auditing an existing setup.
• You want the key gotchas in one place before you start.

When not to use this

• You are doing a different workflow with Login; these steps are specific to the title above.
• You need the full reference docs; this is the short path, not the manual.

Compatibility

• Not pinned to a specific version; follows current Login behavior.

Auth0's Management API documents the verification-email job endpoint. Email verification enforcement patterns are documented in the Actions and database connection docs. Verified against live docs 2026-09-26.