Emails / Authentication

Authentication emails

Branded Supabase Auth email templates for Instant Strata. Templates fall into two groups: action required (sign-in, signup, reset, invite) and notifications (email or password changed). Notifications are informational only: no approval link, no PIN. Email changes in Instant Strata do not require a separate confirmation step; users receive a security notification after the change completes. Copy HTML into the Supabase dashboard. Templates pair with the Authentication UI for action flows.

Action required

User must click a link or enter a PIN. Includes confirmation link and {{ .Token }} where applicable.

Confirm signup

Sent when a user creates an account with email and password and email confirmation is enabled.

Magic link

Sent when a user chooses Continue with magic link or requests a passwordless sign-in via signInWithOtp.

Reset password

Sent when a user clicks Forgot password? and requests a password reset via resetPasswordForEmail.

Invite user

Sent when an administrator invites a user via inviteUserByEmail (e.g. a new strata manager or committee member).

Reauthentication

Sent when a sensitive action requires the user to re-verify their identity (e.g. changing account settings or confirming a high-risk operation).

Notifications

Security notices sent after a change completes. No approval step. Includes a support link if the user did not authorise the change.

Email address changed

Sent to the previous address after an email change completes. Instant Strata applies email changes without a separate confirmation step, so this is a record-only notice.

Password changed

Sent after a user successfully sets a new password. Informational only: no link or PIN required.

Design principles

Action vs notification

Action emails include a forest CTA and optional PIN block. Notifications use a lime-soft banner, plain copy, and a support link. Never ask users to approve an email change that has already happened.

Branded shell

Each template includes the IS mark header, lime accent rule, and lite footer with legal links and copyright.

Plain language

Copy follows Instant Strata voice: direct, professional, no legal jargon. Say what happened, what to do next, and when to contact support.

Production delivery

Use custom SMTP with a dedicated subdomain (e.g. auth.instantstrata.com.au). Disable link tracking on auth emails.

Action template content

Confirm signup

Action required

Sent when a user creates an account with email and password and email confirmation is enabled.

Paste in Authentication → Email Templates

mailer_templates_confirmation_content

Instant Strata

Strata management, simplified

Confirm your email address

Thanks for joining Instant Strata. Confirm {{ .Email }} to finish setting up your account and access your workspace.

Confirm email address

Or enter this one-time code on the sign-in page:

Confirmation code

If you did not request this email, you can safely ignore it. This link or code expires shortly and can only be used once.

Instant Strata Strata management, simplified.

Variables

{{ .ConfirmationURL }}{{ .Token }}{{ .Email }}{{ .SiteURL }}

Magic link

Action required

Sent when a user chooses Continue with magic link or requests a passwordless sign-in via signInWithOtp.

Paste in Authentication → Email Templates

mailer_templates_magic_link_content

Instant Strata

Strata management, simplified

Sign in to Instant Strata

Use the button below to sign in to {{ .Email }}. No password needed.

Or enter this one-time PIN on the sign-in page:

One-time PIN

If you did not request this email, you can safely ignore it. This link or code expires shortly and can only be used once.

Instant Strata Strata management, simplified.

Variables

{{ .ConfirmationURL }}{{ .Token }}{{ .Email }}{{ .SiteURL }}{{ .RedirectTo }}

Reset password

Action required

Sent when a user clicks Forgot password? and requests a password reset via resetPasswordForEmail.

Paste in Authentication → Email Templates

mailer_templates_recovery_content

Instant Strata

Strata management, simplified

Reset your password

We received a request to reset the password for {{ .Email }}. Choose a new password to regain access to your workspace.

Choose a new password

Or enter this one-time code on the reset page:

Reset code

If you did not request this email, you can safely ignore it. This link or code expires shortly and can only be used once.

Instant Strata Strata management, simplified.

Variables

{{ .ConfirmationURL }}{{ .Token }}{{ .Email }}{{ .SiteURL }}

Invite user

Action required

Sent when an administrator invites a user via inviteUserByEmail (e.g. a new strata manager or committee member).

Paste in Authentication → Email Templates

mailer_templates_invite_content

Instant Strata

Strata management, simplified

You have been invited

You have been invited to join Instant Strata as {{ .Email }}. Accept the invitation to set up your account and access your scheme workspace.

Accept invitation

Or enter this one-time code on the sign-in page:

Invitation code

If you did not request this email, you can safely ignore it. This link or code expires shortly and can only be used once.

Instant Strata Strata management, simplified.

Variables

{{ .ConfirmationURL }}{{ .Token }}{{ .Email }}{{ .SiteURL }}{{ .Data }}

Reauthentication

Action required

Sent when a sensitive action requires the user to re-verify their identity (e.g. changing account settings or confirming a high-risk operation).

Paste in Authentication → Email Templates

mailer_templates_reauthentication_content

Instant Strata

Strata management, simplified

Verify it is you

Enter this verification code to continue with your request for {{ .Email }}.

Verification code

This code expires shortly. Do not share it with anyone.

If you did not request this email, you can safely ignore it. This link or code expires shortly and can only be used once.

Instant Strata Strata management, simplified.

Variables

{{ .Token }}{{ .Email }}{{ .SiteURL }}

Notification template content

Email address changed

Notification

Sent to the previous address after an email change completes. Instant Strata applies email changes without a separate confirmation step, so this is a record-only notice.

Paste in Authentication → Email Templates → Security notifications

email_changed_notification

Instant Strata

Strata management, simplified

Security notification

For your records. No action is required if you made this change.

Your email address was changed

The email on your Instant Strata account was updated from {{ .OldEmail }} to {{ .Email }}.

You do not need to approve this change. Sign in with your new email address next time.

Contact support if this was not you

If you did not make this change, contact support immediately to secure your account.

Instant Strata Strata management, simplified.

Variables

{{ .Email }}{{ .OldEmail }}{{ .SiteURL }}{{ .Data }}

Password changed

Notification

Sent after a user successfully sets a new password. Informational only: no link or PIN required.

Paste in Authentication → Email Templates → Security notifications

password_changed_notification

Instant Strata

Strata management, simplified

Security notification

For your records. No action is required if you made this change.

Your password was changed

The password for your Instant Strata account ({{ .Email }}) was changed successfully.

If you made this change, no further action is needed.

Contact support if this was not you

If you did not make this change, contact support immediately to secure your account.

Instant Strata Strata management, simplified.

Variables

{{ .Email }}{{ .SiteURL }}{{ .Data }}

Supabase setup

bash

# Supabase dashboard

# Action templates: Authentication → Email Templates
# Notifications: Authentication → Email Templates → Security notifications

# Instant Strata applies email changes without a separate confirmation step.
# Enable the security notifications below and leave "Change email address"
# unused, or disable secure email change in project auth settings.

# Local development (config.toml excerpt):
[auth.email.template.magic_link]
subject = "Sign in to Instant Strata"
content_path = "./supabase/templates/magic-link.html"

[auth.email.notification.email_changed]
subject = "Your Instant Strata email address was changed"
content_path = "./supabase/templates/email-changed.html"

Verify OTP on the client

Action templates only. Match the type to the flow: email for magic link, signup for confirm signup, recovery for reset password. Notification emails do not use OTP.

tsx

// Client: verify the PIN from action emails (matches AuthForm onPinSubmit)
const { data, error } = await supabase.auth.verifyOtp({
  email,
  token: pin,
  type: "email", // or "signup" | "recovery" | "invite"
})

// Notification emails (email changed, password changed) do not use verifyOtp.

Supabase template variables

Prop	Type	Default	Description
ConfirmationURL	string	-	Full verification URL. Action templates only. Single-use; may be consumed by link prefetching in some inboxes.
Token	string	-	Six-digit one-time password. Action templates only.
TokenHash	string	-	Hashed token for building custom confirmation URLs on your own domain.
SiteURL	string	-	Site URL from Supabase project settings. Used for footer legal links.
RedirectTo	string	-	Redirect URL passed from the client when initiating auth.
Email	string	-	The user's email address. In email-changed notifications, this is the new address.
OldEmail	string	-	Previous email address. Email address changed notification only.
NewEmail	string	-	Requested new email. Only used if secure email change confirmation is enabled in Supabase.
Data	string	-	User metadata object (e.g. first_name from signUp options).