appwrite / appwrite/appwrite

Feature Request: Built-in Account Deletion Confirmation Email & Grace Period

Open
#13,154 0 comments 0 reactions 0 assignees View on GitHub
product / auth product / functions product / messaging
Dominant language
TypeScript
Stars
57.4k
Forks
5.7k
Avg merge
16h 27m
Merged PRs (30d)
291

Description

### 🔖 Enhancement description

Add a built-in account deletion confirmation flow with a secure, expiring, one-time confirmation link.

When a user requests account deletion, Appwrite could send a predefined account-deletion confirmation email, similar to existing authentication emails. After confirmation, the account could enter a `pending deletion` state and remain disabled/recoverable for a configurable grace period (e.g. 7 days) before permanent deletion.

This would avoid requiring developers to implement their own deletion tokens, confirmation emails, soft-delete logic, and scheduled permanent deletion.

### 🎤 Pitch

Account deletion is one of the most destructive actions an application can perform, yet developers currently need to build the confirmation and delayed-deletion flow themselves.

A built-in solution would give Appwrite developers a secure and standardized way to handle this: confirm the deletion by email, temporarily disable the account, provide a configurable grace period, and permanently delete it afterward.

This would make account deletion safer for users and significantly reduce the amount of security-sensitive custom logic developers need to implement.

### 👀 Have you spent some time to check if this issue has been raised before?

- [x] I checked and didn't find similar issue

### 🏢 Have you read the Code of Conduct?

- [x] I have read the [Code of Conduct](https://github.com/appwrite/.github/blob/main/CODE_OF_CONDUCT.md)

Contributor guide

Open the contributing guide

Research direction

The request does not name files, tests, or entry points. Start by locating Appwrite's existing authentication email flow and account-deletion handling; done means the confirmation, pending-deletion, grace-period, recovery, and permanent-deletion lifecycle is defined and covered by tests.

Written by the indexing model from the issue text.

Assessment

Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.