Double opt-in means a new subscriber confirms their address by clicking a link in an email before they join your list. It proves the person owns the address and really asked, which keeps your list clean and your sending reputation healthy. This guide is for teams who collect emails on forms and want to get consent right. We explain confirmed opt-in vs single opt-in, when the law expects it, the trade-offs, and how to run it alongside your forms in WordPress, in about 10 minutes of reading.
The short version
- Single opt-in: people join when they send the form and tick the box.
- Double opt-in: they also confirm by clicking an email confirmation link.
- Germany and some other countries expect proof of consent, which double opt-in gives.
- Your mailing tool usually sends the confirmation; the form collects the consent.
What is the difference between single and double opt-in?
| Single opt-in | Double opt-in | |
|---|---|---|
| How people join | Tick a box and send the form | Tick, send, then click a link in an email |
| List growth | Faster | Slower, because some people never click |
| Fake or mistyped emails | Some get in | Almost none |
| Proof of consent | The form entry | The entry plus the click |
Both start with an unticked consent box on the form. Double opt-in adds one more step, which costs some sign-ups but gives you a list of people who definitely want your emails.
Does the law require double opt-in?
GDPR itself requires consent you can prove, not double opt-in by name. In practice, double opt-in is the usual way to prove it, and in Germany courts have long treated it as the expected standard for marketing email. The UK ICO’s guidance on consent explains what valid consent looks like. This is not legal advice; check the rules where your subscribers live.
How does Echo Forms handle consent?
Echo Forms collects the consent and passes people to your mailing list. On a form’s Marketing tab, Only add people who tick adds a person only if they ticked your consent checkbox, GDPR agreement or toggle. Echo then adds them to the list straight away, as a single opt-in. For a confirmed opt-in, use a mailing tool that sends its own confirmation email for new contacts, or send a welcome email that asks people to confirm before you send them campaigns.
How to run double opt-in with your forms, step by step
- Add a Consent checkbox with clear words, such as Email me the monthly newsletter, left unticked.
- On the Marketing tab, pick your list and set Only add people who tick to that box.
- In your mailing tool, switch on its confirmation or double opt-in setting for that list, where it applies to contacts added from outside.
- Write the confirmation email: one line, one button, and what they will get.
- Send a test entry and click the confirmation link yourself. It should arrive within 5 minutes; we test from 2 different email providers.
- Keep the entry; with the click in your mailing tool, it is your proof of consent.
The send entries to your other tools guide covers the consent setting, and our GDPR compliant forms guide covers the wider rules.
Is double opt-in worth the lost sign-ups?
Usually yes for marketing lists. The people who drop out at the confirmation step were the least likely to open your emails anyway, so your open rates rise and fewer messages land in spam. Send a reminder to people who have not confirmed after 2 days, then let them go after 7 days. For transactional emails, such as a download link or a receipt, no confirmation is needed, because the person asked for that one message.
Double opt-in takes about 10 minutes to set up across your form and mailing tool, and protects your list for years. Start with an unticked consent box, switch on confirmation in your mailing tool, and test the whole path once a month for the first 3 months. See all Echo features for the other ways forms protect your data.
Consent on every form
Consent checkboxes, GDPR agreements and 13 mailing lists are free in Echo Forms.
