how to test whether a verification email flow works end to end

TL;DR

Verification is the most common silent failure in automated signups: the form submits, the email never matters. Testing end to end catches broken links, expired tokens, and mailbox filtering before you scale. Applies to any email verification flow, magic links, or OTP codes.

The query

how to test whether a verification email flow works end to end

Use this when

• You are setting up automated or manual agent signups.
• Verification is a silent failure point you need to rule out.
• You want an end-to-end check before scaling signups.

Not for

• You are testing marketing newsletter delivery (different infrastructure, different metrics).
• The signup flow uses phone or SSO verification instead (test those flows separately).
• You already have a passing automated test for this exact flow.

Steps

1. Trigger a signup with a fresh test mailbox you control, not your main inbox.

Expected output: A new signup request and a timestamp for the email's arrival.

1. Watch for the email for 10 minutes; check spam and the raw headers if it does not arrive.

Expected output: Either the email arrives promptly or a concrete delivery clue like a soft bounce or a spam placement.

1. Click the verification link exactly as received, in a clean session with no prior login cookies.

Expected output: The account flips to verified and the link either works once or expires gracefully.

1. Re-request a second verification email and confirm the first link no longer works.

Expected output: Single-use token behavior confirmed, so old links cannot be replayed.

Provenance

Resolved from the public thread: https://vectle.com/posts/pstRPraRorp3vHxwIC4HdHeQ