<p>A user changing sensitive fields like passwords and email addresses requires a "elevated session" to do so, which requires them to enter their <em>current</em> password.</p>

<p>You can see the template code to do that here for both Craft 2 and 3: <a href="https://craftcms.stackexchange.com/a/4715/57">https://craftcms.stackexchange.com/a/4715/57</a></p>

<p>You can configure the duration of the elevated session with the <a href="https://docs.craftcms.com/v3/config/config-settings.html#elevatedsessionduration" rel="nofollow noreferrer">elevatedSessionDuration</a> config setting.</p>

CC BY-SA 4.0
2018-07-31T17:34:42.947Z
So i tried the above, and no luck, It will update my password but not my email,
Kevin Love
CC BY-SA 4.0
2018-07-31T21:27:05.310Z
Guessing you've got user email validation enabled. If your email settings are setup correctly an email should get sent to the new email address. Once that is clicked, the email address will change for the user.
Brad Bell
CC BY-SA 4.0
2018-08-01T15:45:05.670Z
I set up the form as shown in the link you sent, changed the email and nothing happens. i receive no email regarding the change. What email settings should be modified ?
Kevin Love
CC BY-SA 4.0
2018-08-01T22:50:04.943Z
Under Settings->Email in the Control Panel.  See https://craftcms.com/support/why-doesnt-craft-send-emails and https://craftcms.com/support/troubleshooting-email-errors#dealing-with-email-delivery-issues
Brad Bell
CC BY-SA 4.0
2018-07-30T21:46:58.170Z
2018-07-30T21:46:58.170Z
Brad Bell
<p>I have an account page for all my users, however i'm running into a small issue with being able to update passwords / emails on the frontend. Any advice on how to do this? I read that updating either of those fields would require checking and verifying the change in your email.</p>

<p>Thanks</p>

CC BY-SA 4.0
2018-07-30T17:06:38.007Z
Would you mind using PHP?
Robin Schambach
CC BY-SA 4.0
2018-07-30T17:11:45.900Z
I don't mind using PHP, craft just has terrible documentation and almost every article i find is using craft v2.
Kevin Love
<craft3><users><frontend-form>
frontend account edits
# frontend account edits

(Asked by: username_0 on 2018-07-30)

I have an account page for all my users, however i'm running into a small issue with being able to update passwords / emails on the frontend. Any advice on how to do this? I read that updating either of those fields would require checking and verifying the change in your email.

Thanks

**Tags:** craft3, users, frontend-form
> **Comments:**
> **username_1**: Would you mind using PHP?  
> **username_0**: I don't mind using PHP, craft just has terrible documentation and almost every article i find is using craft v2.  

---

## 1 answers

### Answer by username_2 on 2018-07-30. Score: 2

A user changing sensitive fields like passwords and email addresses requires a "elevated session" to do so, which requires them to enter their *current* password.

You can see the template code to do that here for both Craft 2 and 3: <https://craftcms.stackexchange.com/a/4715/57>

You can configure the duration of the elevated session with the [elevatedSessionDuration](https://docs.craftcms.com/v3/config/config-settings.html#elevatedsessionduration) config setting.

> **Comments:**
> **username_0**: So i tried the above, and no luck, It will update my password but not my email,  
> **username_2**: Guessing you've got user email validation enabled. If your email settings are setup correctly an email should get sent to the new email address. Once that is clicked, the email address will change for the user.  
> **username_0**: I set up the form as shown in the link you sent, changed the email and nothing happens. i receive no email regarding the change. What email settings should be modified ?  
> **username_2**: Under Settings->Email in the Control Panel.  See https://craftcms.com/support/why-doesnt-craft-send-emails and https://craftcms.com/support/troubleshooting-email-errors#dealing-with-email-delivery-issues  

---

