Disposable/temporary email addresses are accepted during account registration
Reproduction steps
- Open the Appwrite Console registration/sign-up page.
- Click Create account.
- Enter a valid name and password.
- Use an email address from a temporary/disposable email service.
- Complete the registration form and submit it.
- The account is successfully created using the temporary/disposable email address.
- Verify that the temporary email address can be used to receive the verification email and access the account.
Expected behavior
The registration process should detect and prevent the use of known temporary/disposable email addresses, or otherwise handle them according to Appwrite's intended email validation policy.
Regular, non-disposable email addresses should continue to work normally.
Actual Behavior
A temporary/disposable email address is accepted during account registration without being rejected.
I was able to create an account using a temporary email address successfully. The registration process did not display any warning or error indicating that the email address was temporary/disposable.
I can provide screenshots showing the registration and successful account creation if required.
Appwrite version
Appwrite Cloud
Operating system
Windows
Your Environment
1.Appwrite:** Appwrite Cloud (hosted) 2.SDK:** Not applicable — the issue was reproduced directly through the Appwrite web interface. 3.Client:** Google Chrome on Windows 10/11 4.Customization:** No custom Appwrite configuration or modifications were used.
Have you spent some time to check if this issue has been raised before?
- I checked and didn't find similar issue
Have you read the Code of Conduct?
- I have read the Code of Conduct
Source: appwrite/appwrite