Does a Confluence Cloud email invitation link expire?

[Judith DiBello]

How long is the link in the user invitation email active?

Thanks.

[Daniel Eads · Accepted solution]

Hi Judith, welcome to the Community!

Assuming an email invitation was sent for a user, and they haven't been removed as a user from Confluence, they can trigger a "fresh" link if they click on an expired one. You can also click Resend invite in the Users list to trigger another email from the administration side.

If you remove an unverified user from your site through the Users list in administration, even a non-expired invitation link will not work to grant access to your site.

Hope that helps!

Cheers,
Daniel | Atlassian Support

[denniskrene]

I'm concerned about the potential security risks associated with non-personalized non-expiring invitation links. Given that these links can grant access to sensitive information, it seems risky not to have them expire. If a link falls into the wrong hands, unauthorized users could gain access until they are noticed and removed from the admin panel. Considering the predictable structure of these links, there's a worry that they could be brute-forced, exposing critical data of small teams, especially those using the free tier.

Is there a mechanism to disable or expire invitation links to prevent unauthorized access?

[KAGITHALA BABU ANVESH]

I think after 24 hours , the link wil be expires. It's my assumption only , previously I tried some forgot password related link , after 24 hours the reset link is not worked. Based on that I'm assuming it .