Email addresses

An account can hold up to 10 email addresses. Manage them under Settings → Emails (/settings/emails). Adding, removing and changing the primary ask you to confirm it’s you first (password, authenticator code or passkey), and access tokens cannot make these changes.

What a verified address does

Every verified address on your account:

• signs you in, and can receive a password reset;
• accepts an email invite sent to it (see Workspaces);
• links your commits: a commit whose author or committer email is any of your verified addresses shows as yours.

An unverified address does none of these.

Adding and verifying an address

Type the address under Add an email address. neosource mails it a verification link that names the account it is being added to. If you get one for an account that isn’t yours, ignore it.

Addresses must be plain ASCII with a full domain (at least two labels, such as ivy@example.com); ivy@contractor is refused. For an internationalised domain, type it in its xn-- form. Addresses already on an account are not re-checked.

To confirm an address that isn’t your primary, you must be signed in to the account it was added to when you open the link. Opened signed out, or signed in as someone else, the page asks you to sign in as that account and then confirms the same link. Nothing is spent until then. This stops someone from adding your address to their account and having you, or a mail scanner, confirm it for them.

An address can be verified on only one account. If another account already holds it verified, confirming it fails.

Resend mails a fresh link to an address that is still unverified.

The primary address

Your primary address is where neosource sends account mail. Choose another verified address with Make primary. The old primary is mailed a notice of the change.

The old address stays on your account and still signs you in. Remove it as a separate step if you no longer want it.

Removing an address

Remove is offered on every address except the primary; make another address primary first. Removing a verified address mails it a notice. Any verification or password-reset link still outstanding for it stops working.

Removing an address ends every workspace or repository membership you joined through an invite to that address. If that would leave a workspace without an Owner, the removal is refused.

Invites to another of your addresses

An invite sent to an address you hold verified is accepted from your account as it is. You don’t need the mailed link: every pending workspace or repository invite sent to any of your verified addresses appears under Invitations at the top of your home, personal or organization (whichever / opens), with the role, the address it was sent to and when it expires, and Accept there joins straight away. An invite that was revoked, expired or already used in the meantime is taken off the list. If the invite is for an address your account doesn’t hold, the invite page offers Add

to @handle. Add it, open the link mailed to it while signed in, then come back and accept.