Notify users about security-sensitive actions on their accounts

Nov 11, 2025

Letting users know about security-sensitive actions on their account is an increasingly common authentication feature.

We’re excited to announce an expansion of our email templates to handle these these types of events, beginning with:

  • Password changed
  • Email changed
  • Phone number changed
  • Identity linked or unlinked
  • Multi-factor authentication enrolled or unenrolled

You can find documentation—including for our API—here. The list of templates will continue to grow as our feature-set changes, and as we gather feedback from our community.

[!NOTE] To enable the feature preview, click your profile avatar, click Feature previews and enable Security notification templates.

What we’d like to know from you#

  • Any bugs or issues you run into when using email templates
  • Any friction you run into when managing email templates through the Supabase dashboard
  • Any additional use cases for email templates, and how we might be able to better support your workflow

Rollout plan#

  • Changes are behind a feature preview in the dashboard
  • Starting from 13th Nov 2025, we will roll out to the hosted platform first as incremental % rollout where users will be opted into the feature preview by default
  • If you might want opt out of the changes, you may disable the changes via the feature previews which you can access through the user dropdown in the header here:

Build in a weekend, scale to millions