#13733·appwrite

Deny adding identity if the email differs from the current logged-in user email

Author: abhishek-junghareCreated Sep 16, 2026Updated Sep 17, 2026
Labelsproduct / authproduct / messaging

Enhancement description

When adding an identity to an existing Appwrite account, the identity's email address should match the email address of the currently authenticated user.

Currently, it is possible to add an identity with an email address that differs from the email address associated with the current user account. It is rarely a good UX, as users may unintentionally link an identity to the wrong account or end up with multiple unrelated email addresses associated with the same account.

It would be better to deny adding identities with a different email address.

Pitch

Have you spent some time to check if this issue has been raised before?

  • I checked and didn't find similar issue

Have you read the Code of Conduct?