Step-by-Step Fix
1. Use the Newest Email Only
If you requested multiple verification emails, all older links are invalidated automatically when a new one is sent:
- Go to your inbox and sort by date
- Open the most recent email from OpenAI (from
noreply@tm.openai.com) - Click its verification link within 10 minutes of it arriving
- Do not click any earlier verification emails — they are expired
2. Open the Link in an Incognito / Private Window
This is the fastest fix for redirect-loop failures:
- Copy the verification URL from the email
- Open an incognito (Chrome: Ctrl+Shift+N) or private (Firefox: Ctrl+Shift+P) window
- Paste the URL and press Enter
- Complete the verification flow
If it works in incognito, fix your regular browser by clearing OpenAI cookies (see step 3).
3. Clear Site Data (Targeted Approach)
If incognito works but your regular browser doesn't:
- Open browser settings → Privacy & Security → Site Settings
- Search for and delete all data from:
chat.openai.comopenai.comauth0.com
- Restart the browser
- Click the verification link (the newest one) in the clean browser
4. Disable Extensions and VPN
Browser extensions that block cross-site requests can intercept the verification callback:
- Disable all extensions temporarily
- Disable VPN if active
- Retry the verification link
If the link works after disabling extensions, re-enable them one at a time to identify the problematic one.
5. Request a Fresh Verification Email
If you've been trying an old link:
- Log out of ChatGPT completely
- Go to
https://chat.openai.comand attempt to log in - When prompted about unverified email, click Resend verification email
- Check your inbox within 5 minutes
- Click the new link immediately in an incognito window
6. Check the Account You're Logged Into
A verification link is account-specific. If you're logged into a different ChatGPT account in your browser:
- Log out of all accounts
- Click the verification link while not logged into any ChatGPT account
- The link will log you in and verify the correct account simultaneously
7. Escalate if Persistent Failures Continue
If fresh links consistently fail even in incognito mode:
- Note the exact error text
- Note the timestamp when the verification email was received
- Note your browser and OS
- Whether incognito reproduces the error
- Submit a support request at help.openai.com
Why This Happens
Email verification links contain a time-limited signed token that proves you have access to the email address. OpenAI's verification tokens expire after approximately 10–15 minutes as a security measure to prevent old links from being exploited. When you request a new verification email, the server also invalidates all existing tokens for your account — making previous links instantly unusable. The redirect-loop failure mode occurs when a valid link is clicked but the auth callback is blocked by browser state: the link triggers a redirect to auth0.com which sets a session cookie, but if that cookie can't be set (due to an existing conflicting cookie or a content blocker), the flow redirects back to login as a fallback.
Common Mistakes to Avoid
- Clicking the wrong verification email — if you requested multiple emails, only the last one is valid; clicking an earlier one will always fail
- Waiting too long before clicking the link — links expire within 10–15 minutes; if you found the email in spam 20 minutes later, request a fresh one rather than clicking the old one
- Not requesting multiple emails at once — each new request invalidates previous links, so if you click "Resend" 3 times, only the third email's link will work
- Trying to verify while logged into a different account — log out before clicking the verification link, or open it in an incognito window where no account is logged in
- Not checking auth0.com cookies — stale auth0.com session data is a frequently overlooked cause of verification link redirect failures
Prevention Tips
- Keep a clean browser profile for ChatGPT — the verification flow works reliably in a fresh browser state
- Don't click resend verification repeatedly — wait at least 5 minutes for the email to arrive before requesting another
- Add
noreply@tm.openai.comto your email's safe senders list to prevent spam filter delays that cause links to expire before you see them
FAQ
Q: How many times can I request a new verification email?
You can request a new verification email as many times as needed, but each request immediately invalidates all previous links. If you click "Resend" three times, only the link in the third email will work — the first two become expired instantly. Wait at least 5 minutes after each request to give the email time to arrive before requesting another. If emails are not arriving within 5 minutes, check your spam folder and search for noreply@tm.openai.com.
Q: I clicked the verification link on my phone and it didn't work. Can I try on desktop instead? Yes. Email verification links are not device-specific — you can click the link on any device or browser. If the link failed on your phone, copy the full URL from the email and paste it into a desktop browser's incognito window. Make sure you are not logged into a different OpenAI account on the desktop browser when you click the link, as this can cause a conflict.
Q: Can a corporate or school email block ChatGPT's verification emails?
Yes, very commonly. Corporate and university email systems often block transactional emails from external senders using aggressive spam filters or domain allowlists. If you are using a work or school email address, check your spam and quarantine folders first. If the email genuinely never arrives, ask your IT administrator to whitelist the domain tm.openai.com. As an alternative, consider using a personal Gmail or Outlook address for your ChatGPT account to avoid institutional email filtering entirely.
Q: The verification link opens but shows an error saying "This link has already been used." What does that mean? Each verification link can only be used once. If you see "link already used," either you already successfully verified your account (try logging in normally), or someone else with access to your email account clicked the link before you. If you are already verified and can log in, no action is needed. If you cannot log in and suspect unauthorized access, change your password and enable 2FA immediately, then contact OpenAI support.
Q: My verification email arrived instantly but the link shows as expired. Is this a bug? If the email arrived immediately but the link says "expired," you likely clicked a link from a previous email rather than the newest one. Sort your inbox by date and confirm you are opening the most recent verification email from OpenAI. Every time you click "Resend," all older links expire instantly regardless of their original expiry timer. Open the newest email and use only that link.
Q: Does ChatGPT require re-verification if I change my email address? Yes. If you change your account email address, OpenAI sends a new verification email to the new address. You must click the verification link in that email to confirm the new address before it becomes active on your account. Until verified, your old email remains the login credential. The verification link for an email change follows the same rules: expires in 10–15 minutes and is invalidated by subsequent requests.
Q: What if my email provider rewrites or shortens the verification link? Some email clients (particularly corporate Outlook deployments) use URL rewriting for security scanning, which can break the verification link's signature. If you click the link and get an error about an invalid or malformed token, try right-clicking the link in your email client and selecting "Copy link address," then paste the full URL directly into your browser's address bar in an incognito window. This bypasses the rewriting issue.
Related Articles
- ChatGPT login not working on desktop app
- ChatGPT login not working on mobile
- ChatGPT access denied or account blocked
Additional FAQ
Q: What is the fastest way to diagnose a login problem? The fastest diagnostic is to open an incognito or private browser window and attempt to sign in there. Incognito windows run without extensions and use fresh cookies, which isolates the two most common causes: a browser extension interfering with authentication, or corrupted session cookies. If login works in incognito, the issue is your main browser profile. If it still fails, the problem is your network, your account, or a platform-side incident.