Email Notifications
Vyntech Account sends transactional emails on behalf of your tenant — verification, password reset, login alerts, and welcome messages. This guide covers what emails are sent, how to configure them, and how to customize branding.
Email Types
Vyntech Account automatically sends the following transactional emails based on user actions and tenant configuration. Some are always enabled (critical security emails), while others can be toggled on or off.
| Trigger | Details | Configurable | |
|---|---|---|---|
| Verification | User registers | Contains verification link, 24h expiry | Always enabled |
| Welcome | After registration (if enabled) | Onboarding message with tenant branding | Yes |
| Password Reset | Forgot-password request | Contains reset link, 1h expiry | Always enabled |
| Login Alert | Login from new device/IP (if enabled) | Includes device, IP, location, timestamp | Yes |
| Password Change Confirmation | After password change (if enabled) | Confirms password was changed, links to support | Yes |
| MFA Enabled Confirmation | User enables MFA | Confirms MFA is active on their account | Always enabled |
| Account Locked | Account locked after failed attempts | Informs user, includes unlock instructions | Always enabled |
| Session Revoked | All sessions revoked by admin | Notifies user that all sessions were terminated | Always enabled |
Note: Critical security emails (verification, password reset, MFA confirmation, account locked, session revoked) cannot be disabled. They are always sent to protect users from unauthorized access.
Configuring Notifications
Use the Settings API to enable or disable configurable email notifications for your tenant. The notifications section controls which optional emails are sent. Updates use deep merge — only the fields you include are changed.
Requires settings:write permission.
/api/v1/settings🔒 AuthUpdate notification preferences for your tenant.
{
"notifications": {
"welcome_email": true,
"login_alert": true,
"password_change_alert": true
}
}Important: Setting a notification to false only disables the optional email. Critical security emails (verification, password reset, account locked) are always sent regardless of these settings.
Email Branding
All transactional emails use your tenant's branding settings to create a consistent experience for your users. The branding section of tenant settings controls how emails look:
- •Logo: Displayed in the email header. Recommended size: 200×50px, PNG or SVG.
- •Primary color: Used for buttons, links, and accent elements in email templates.
- •Company name:Shown in the email header and footer (e.g., "Acme Corp").
/api/v1/settings🔒 AuthUpdate email branding for your tenant.
{
"branding": {
"logo_url": "https://cdn.acme-corp.com/logo.png",
"primary_color": "#4f46e5",
"company_name": "Acme Corp"
}
}How branding affects emails:The logo appears centered in the email header. The primary color is applied to CTA buttons and link text. The company name appears in both the header (next to the logo) and the footer alongside a "Powered by Vyntech" notice. Changes apply immediately to all subsequent emails.
Email Delivery
All transactional emails are sent through the platform's managed email service. You don't need to configure an SMTP server or email provider — Vyntech Account handles delivery infrastructure for you.
Sendernoreply@id.vyntech.com.au (default)SPF/DKIMConfigured automatically — no DNS changes neededDelivery timeTypically under 5 seconds from triggerRetry policyFailed deliveries retried 3 times with exponential backoffDeliverability: SPF and DKIM records are pre-configured for the default sender domain. This ensures emails pass spam filters and arrive in the primary inbox. Enterprise plans can use a custom sender domain with dedicated DNS records for maximum deliverability.
Custom Sender Domain (Enterprise)
Enterprise plan tenants can configure a custom from address (e.g., noreply@acme-corp.com) for all transactional emails. This improves brand recognition and deliverability for your organization.
Setup Process
- 1Provide your desired sender domain (e.g.,
acme-corp.com) via the admin dashboard or Settings API. - 2Add the required DNS records to your domain: CNAME for mail routing, SPF record, and DKIM public key.
- 3Vyntech Account verifies DNS records automatically. Once verified, all emails switch to your custom domain.
Required DNS Records
| Type | Name | Value |
|---|---|---|
| CNAME | mail._domainkey | dkim.id.vyntech.com.au |
| TXT | @ | v=spf1 include:spf.id.vyntech.com.au ~all |
| CNAME | vyntech._domainkey | vyntech-dkim.id.vyntech.com.au |
Enterprise only: Custom sender domains are available exclusively on the Enterprise plan. DNS verification typically completes within 24–48 hours depending on TTL propagation. Contact support if verification takes longer.
Best Practices
Enable login alerts for sensitive tenants
For tenants handling sensitive data, enable login_alert so users are notified immediately when their account is accessed from a new device or IP. This provides an early warning for compromised credentials.
Keep welcome emails enabled for onboarding
Welcome emails improve the onboarding experience by confirming account creation and providing a branded first impression. They also serve as a delivery test — if the welcome email arrives, you know the user's inbox is reachable.
Don't disable password change alerts
Password change confirmation emails are a critical security signal. If an attacker changes a user's password, this email is the first thing that tips the user off. Keep password_change_alert enabled for all tenants.
Test email delivery with the test endpoint
Use POST /api/v1/settings/test-emailto send a test email to a specific address. This verifies that your branding looks correct and that emails are delivered to the user's inbox (not spam).
What's Next
Webhooks Guide →
Receive real-time HTTP notifications for tenant events.
Tenant Settings Guide →
Full reference for all tenant configuration options.
Password Policies Guide →
Configure password strength, rotation, and MFA enforcement.
Settings API →
Programmatically manage notification and branding settings.