Make new users confirm email

GitLab can be configured to require confirmation of a user’s email address when the user signs up. When this setting is enabled, the user is unable to sign in until they confirm their email address.

1. In the upper-right corner, select Admin.
2. Select Settings > General.
3. Expand Sign-up restrictions and look for the Email confirmation settings options.

Confirmation token expiry

By default, a user can confirm their account within 24 hours after the confirmation email was sent. After 24 hours, the confirmation token becomes invalid.

Automatically delete unconfirmed users

When email confirmation is turned on, administrators can enable the setting to automatically delete unconfirmed users.