Double opt-in vs single opt-in is one of those questions that sounds like a technical detail but actually shapes your sender reputation from the very first email you send, because the way someone joins your list determines how engaged they are once they're on it. I lean toward double opt-in for most senders, and here's the reasoning, along with the cases where single opt-in still makes sense (see also how to build an email list fast).
Single opt-in is the flow you already know: someone types their email into a form and they're on your list immediately, no confirmation step required. Double opt-in adds one email in between: after someone signs up, they get a message asking them to click a link to confirm, and only after that click do they actually land on your active list. It sounds like a small difference in UX, but it changes who ends up on your list and how those people behave once they're there, which is really what deliverability comes down to.
The mechanism is simple: a confirmation click is a small piece of friction, and friction filters out the addresses that were never going to engage anyway, the mistyped emails, the fake ones people use to get past a paywall, and the spam traps that get seeded into scraped or purchased lists. When you skip that step, all of those bad addresses land on your list at full strength, and they sit there generating bounces, spam complaints, and dead weight that never opens anything. Gmail and Yahoo read engagement at the list level over time, so a list padded with unconfirmed addresses drags your whole sending reputation down, not just the campaigns those addresses happen to be on. I've seen this play out over and over in the audits I've done: accounts that switch from single to double opt-in usually see their spam complaint rate drop within a month or two, simply because the people left on the list actually wanted the email.
I wouldn't tell every sender to add a confirmation step. If someone just bought something from you, or booked a demo, or filled out a form with their name and phone number attached, that's already a strong signal of intent, and adding a confirmation email on top of it mostly just adds friction without much upside. Ecommerce order and shipping updates, transactional receipts, and post-purchase sequences are usually fine on single opt-in because the relationship already has proof behind it. The risk with single opt-in shows up specifically on cold or low-intent signups: lead magnets, contest entries, pop-up forms on a blog, anywhere someone can type an email in five seconds without much thought behind it.
If double opt-in feels like too much friction for your funnel, there are a couple of middle-ground options. Some platforms support a soft confirmation, where new subscribers get a welcome email asking them to reply or click something within their first few emails, and if they don't, they get quietly moved to a lower-priority sending tier instead of being removed outright. Another option is running periodic re-permission passes on your existing single opt-in list, where you ask anyone who hasn't opened in the last few months to confirm they still want to hear from you. It's not as clean as double opt-in from the start, but it catches a lot of the same dead weight after the fact. If you're dealing with an older list that's never had this kind of cleanup, it's worth reading through how to clean an email list before you decide which approach fits.
If you're moving an existing single opt-in list to double opt-in, don't just flip the setting and send everyone a confirmation email out of nowhere, that reads as spammy and you'll lose people who were perfectly good subscribers. Apply double opt-in to new signups going forward, and leave your existing list as is unless you're specifically doing a re-engagement or list cleaning project. For new signups, make the confirmation email itself simple: one clear button, a short line about what they'll get, and ideally it arrives within a minute or two of signup while the intent is still fresh. The longer that confirmation email sits unopened, the more confirmations you lose to people who simply forgot they signed up.
Yes, you'll typically lose 10 to 30 percent of signups who never click the confirmation, but the people who remain are far more engaged, which matters more for deliverability than raw list size.
Not in the US under CAN-SPAM, though it's effectively required in the EU and a few other regions under GDPR-style consent rules, so check the requirements for wherever your subscribers are located.
No, it prevents new bad addresses from getting in, but it won't clean out the ones already on your list, so pair it with a list cleaning pass if you're already seeing placement problems.
Run your domain through the free Inbox Scorecard at /scorecard to see how your current signups are affecting placement, or grab a full deliverability audit at /audit and I'll walk through your list health with you.