Menu
Amazon Simple Email Service
Developer Guide (API Version 2010-12-01)

Verifying Email Addresses in Amazon SES

Amazon SES requires that you verify your email address or domain, to confirm that you own it and to prevent others from using it. This section discusses verifying individual email addresses. For information about domain verification, see Verifying Domains in Amazon SES.

Overview

With the exception of addresses containing labels (see below), you must verify each email address (or the domain of the email address) that you will use as a "From", "Source", "Sender", or "Return-Path" address for your messages. Until your account is out of the Amazon SES sandbox, you must also verify the email address of every recipient except for the recipients provided by the Amazon SES mailbox simulator. For more information about the mailbox simulator, see Testing Amazon SES Email Sending. For more information about moving out of the sandbox, see Moving Out of the Amazon SES Sandbox.

Important notes about email address verification are as follows:

  • The entire email address is case-sensitive. For example, if you verify sender@example.com, you cannot send emails from sender@EXAMPLE.com unless you verify sender@EXAMPLE.com also. (Domain verification, however, is case-insensitive. For more information, see Verifying Domains in Amazon SES.)

  • If you individually verify an email address and you also verify the domain of that address, the verified identity settings (such as DKIM and feedback notifications) of the email address override the domain-level settings. For example, if you verify example.com and sender@example.com, and you have DKIM enabled for example.com but not enabled for sender@example.com, then emails you send from sender@example.com will not be DKIM-signed.

  • Amazon SES has endpoints in multiple AWS regions, and email address verification status is separate for each AWS region. You must complete the email address verification process for each sender in the AWS region(s) you want to use. For information about using Amazon SES in multiple AWS regions, see Regions and Amazon SES.

  • You can verify as many as 1,000 identities (domains and email addresses, in any combination) per AWS account.

  • Verifying an email address also allows you to set the "From" and "Return-Path" address to any address formed by adding a label to the verified address. Addresses that contain labels are of the form name+label@example.com, with user-specified text between the plus sign (+) and the at sign (@).

    For example, if you verify user@example.com, you can also send email from user+recipient1@example.com, user+recipient2@example.com, and so on. This makes it possible to support Variable Envelope Return Path (VERP) — the use of a different return path for each recipient. For more information about VERP, see http://en.wikipedia.org/wiki/Variable_envelope_return_path.

    When you verify an unlabeled address, then you are essentially verifying all addresses that are formed by adding a label to the verified address. The opposite, however is not true. Verifying an email address that already contains a label does not allow you to send from other addresses. For example, verifying andrew+recipient1@example.com does not allow you to send from andrew@example.com, andrew+recipient2@example.com, or andrew+recipient1+recipient2@example.com.

  • If you want to use the SendRawEmail API action to send a message that contains a "Sender" header, then you must first verify the email address or domain in that header. For more information, see About Email Header Fields.

Verification Procedures

The following procedures show how to use the Amazon SES console to verify and view email addresses.

To verify an email address

  1. Go to your email address list in the Amazon SES console, or follow these instructions to navigate to it:

    1. Sign in to the AWS Management Console and open the Amazon SES console at https://console.aws.amazon.com/ses.

    2. In the navigation pane, under Identity Management, choose Email Addresses.

  2. Choose Verify a New Email Address.

  3. In the Verify a New Email Address dialog box, type your email address in the indicated field, and then choose Verify This Email Address.

    Verify a New Email Address

  4. In your email client, open the message from Amazon SES asking you to confirm that you are the owner of this email address.

  5. Click the link in the message.

    Note

    The link in the verification message expires 24 hours after your original verification request.

  6. The status of the email address in the Amazon SES console will change from "pending verification" to "verified".

  7. You can now use Amazon SES to send email from this address. To send a test email, check the box next to the verified email address, and then choose Send a Test Email.

To view your verified email addresses

  1. Go to your email address list in the Amazon SES console, or follow these instructions to navigate to it:

    1. Sign in to the AWS Management Console and open the Amazon SES console at https://console.aws.amazon.com/ses.

    2. In the navigation pane, under Identity Management, choose Email Addresses.

  2. In the list of verified email addresses, you can expand one or more email addresses to view the details.

To remove verified email addresses

  1. Go to your email address list in the Amazon SES console, or follow these instructions to navigate to it:

    1. Sign in to the AWS Management Console and open the Amazon SES console at https://console.aws.amazon.com/ses.

    2. In the navigation pane, under Identity Management, choose Email Addresses.

  2. Check the box beside each email address that you want to remove, and then choose Remove.

Using the Amazon SES API

You can also manage verified email addresses with the Amazon SES API. The following actions are available:

  • VerifyEmailIdentity

  • ListIdentities

  • DeleteIdentity

  • GetIdentityVerificationAttributes

Note

The API actions above are preferable to the following older API actions, which are deprecated as of the May 15, 2012 release of Domain Verification.

  • VerifyEmailAddress

  • ListVerifiedEmailAddresses

  • DeleteVerifiedEmailAddress

You can use these API actions to write a customized front-end application for email address verification. For a complete description of the API actions related to email verification, go to the Amazon Simple Email Service API Reference.