Hi , The login api enables the user to login even if he/she hasn't verified their email. You could use hasVerifiedEmail() on your login function.