Single vs Double Opt-in: Pros, Cons, and When to Use Each
The list-size cost of confirmation against the deliverability cost of skipping it, with the jurisdictions that decide for you.
On this page
The short version
- Double opt-in costs you a share of subscribers at signup and buys a list where every address is confirmed real and confirmed wanted.
- The confirmation step is the cheapest spam trap protection available, and traps are the one list problem with no recovery path.
- There is a hybrid worth knowing about: deliver the lead magnet immediately and confirm in the same email, so nothing is withheld while the address is still verified.
Single opt-in adds the address to the list on submission. Double opt-in sends a confirmation email and adds it only when the link is clicked. That one extra step changes list size, list quality, deliverability and, in some jurisdictions, what you can prove.
It is one of the few decisions in email where both answers are defensible, which is why it keeps being argued about. What follows is the trade priced out, rather than a recommendation dressed as a fact.
What each costs and buys
Single opt-in
Everyone who submits joins
- Larger list, immediately
- No confirmation step to lose people at
- Typos, bots and spite signups all join
- Spam traps join too, silently
- Consent is harder to evidence
- Suits low-risk lists and short-lived offers
Double opt-in
Only confirmed addresses join
- Smaller list, better engagement ratios
- A confirmation step where some people drop
- Typos and bots filtered by construction
- Traps effectively cannot enter
- Consent is evidenced by a click with a timestamp
- Suits anything you intend to mail for years
The number that decides it
The confirmation step loses a meaningful share of signups — typically somewhere between a fifth and a third, though it varies enormously with how well the confirmation email is written and how quickly it arrives.
That looks decisive until you ask what the lost share was worth. It contains every mistyped address, every bot, every person who typed something to get a download and would never have opened anything, and every address someone entered that was not theirs.
The people it also loses — genuine subscribers who did not see or did not bother with the confirmation — are the real cost, and reducing that group is where the practical work is.
The same thousand submissions, both ways
The interesting comparison is not list size, it is engaged subscribers after three months. Illustrative figures showing the shape of the trade.
Illustrative model showing why the smaller list can end up with more engaged subscribers. Run it on your own confirmation rate and three-month engagement before deciding.
Making the confirmation step lose less
Most of the drop-off at confirmation is avoidable. Send it instantly, not on a schedule. Make the subject line say plainly what it is — "Confirm your email to get the checklist" beats anything clever. Put the confirmation link high, as a button, and repeat it as a text link.
Tell people on the form and on the confirmation page that the email is coming, from whom, and roughly when. A visitor who has been told to expect it will look for it; one who has not will assume the signup failed.
And send a single reminder after a day to anyone who has not confirmed. That one email typically recovers a large fraction of the people who simply missed the first.
The hybrid
The strongest argument for single opt-in is that withholding the lead magnet behind a confirmation click feels like a bait and switch. That argument disappears if you do not withhold it.
Deliver the file immediately — on the confirmation page, and in the same email that carries the confirmation link. The magnet is not the incentive to confirm; the ongoing emails are. You get the verified address, and nobody is held to ransom over a checklist.
This is the arrangement most senders should default to, and it is rarely the one a platform sets up for you.
If you use double opt-in
- The confirmation sends within seconds, not on a schedule
- The subject line states plainly what the email is for
- The link appears as a button near the top and as text lower down
- The form and the thank-you page both say it is coming, and from whom
- One reminder goes out after about a day
- The lead magnet is delivered immediately, not withheld
- Unconfirmed addresses are cleared out on a schedule
Frequently asked questions
Is double opt-in legally required anywhere?
No regime named in common compliance guidance requires it outright. It is a strong way to evidence consent, which is a different thing from being mandated — and being able to evidence consent is what actually matters under a consent regime.
What happens to people who never confirm?
Give them a defined window — a week or two, plus one reminder — then remove them. Leaving unconfirmed addresses in the database indefinitely creates a segment nobody can lawfully mail and nobody remembers exists.
Can I switch an existing single opt-in list to double?
Not retrospectively without a re-permission campaign, which will lose a large share of the list. The usual approach is to apply it to new signups from today and clean the existing list by engagement instead.