Docs/Account/Guides/Email Notifications

Email Notifications

Vyntech Account sends transactional emails on behalf of your tenant — verification, password reset, login alerts, and welcome messages. This guide covers what emails are sent, how to configure them, and how to customize branding.

Email Types

Vyntech Account automatically sends the following transactional emails based on user actions and tenant configuration. Some are always enabled (critical security emails), while others can be toggled on or off.

EmailTriggerDetailsConfigurable
VerificationUser registersContains verification link, 24h expiryAlways enabled
WelcomeAfter registration (if enabled)Onboarding message with tenant brandingYes
Password ResetForgot-password requestContains reset link, 1h expiryAlways enabled
Login AlertLogin from new device/IP (if enabled)Includes device, IP, location, timestampYes
Password Change ConfirmationAfter password change (if enabled)Confirms password was changed, links to supportYes
MFA Enabled ConfirmationUser enables MFAConfirms MFA is active on their accountAlways enabled
Account LockedAccount locked after failed attemptsInforms user, includes unlock instructionsAlways enabled
Session RevokedAll sessions revoked by adminNotifies user that all sessions were terminatedAlways enabled

Note: Critical security emails (verification, password reset, MFA confirmation, account locked, session revoked) cannot be disabled. They are always sent to protect users from unauthorized access.

Configuring Notifications

Use the Settings API to enable or disable configurable email notifications for your tenant. The notifications section controls which optional emails are sent. Updates use deep merge — only the fields you include are changed.

Requires settings:write permission.

PATCH/api/v1/settings🔒 Auth

Update notification preferences for your tenant.

curl -X PATCH https://id.vyntech.com.au/api/v1/settings \ -H "Authorization: Bearer eyJhbGciOiJFZERTQSIs..." \ -H "Content-Type: application/json" \ -d '{ "notifications": { "welcome_email": true, "login_alert": true, "password_change_alert": true } }'
Request Body
{
  "notifications": {
    "welcome_email": true,
    "login_alert": true,
    "password_change_alert": true
  }
}

Important: Setting a notification to false only disables the optional email. Critical security emails (verification, password reset, account locked) are always sent regardless of these settings.

Email Branding

All transactional emails use your tenant's branding settings to create a consistent experience for your users. The branding section of tenant settings controls how emails look:

  • Logo: Displayed in the email header. Recommended size: 200×50px, PNG or SVG.
  • Primary color: Used for buttons, links, and accent elements in email templates.
  • Company name:Shown in the email header and footer (e.g., "Acme Corp").
PATCH/api/v1/settings🔒 Auth

Update email branding for your tenant.

curl -X PATCH https://id.vyntech.com.au/api/v1/settings \ -H "Authorization: Bearer eyJhbGciOiJFZERTQSIs..." \ -H "Content-Type: application/json" \ -d '{ "branding": { "logo_url": "https://cdn.acme-corp.com/logo.png", "primary_color": "#4f46e5", "company_name": "Acme Corp" } }'
Request Body
{
  "branding": {
    "logo_url": "https://cdn.acme-corp.com/logo.png",
    "primary_color": "#4f46e5",
    "company_name": "Acme Corp"
  }
}

How branding affects emails:The logo appears centered in the email header. The primary color is applied to CTA buttons and link text. The company name appears in both the header (next to the logo) and the footer alongside a "Powered by Vyntech" notice. Changes apply immediately to all subsequent emails.

Email Delivery

All transactional emails are sent through the platform's managed email service. You don't need to configure an SMTP server or email provider — Vyntech Account handles delivery infrastructure for you.

Sendernoreply@id.vyntech.com.au (default)
SPF/DKIMConfigured automatically — no DNS changes needed
Delivery timeTypically under 5 seconds from trigger
Retry policyFailed deliveries retried 3 times with exponential backoff

Deliverability: SPF and DKIM records are pre-configured for the default sender domain. This ensures emails pass spam filters and arrive in the primary inbox. Enterprise plans can use a custom sender domain with dedicated DNS records for maximum deliverability.

Custom Sender Domain (Enterprise)

Enterprise plan tenants can configure a custom from address (e.g., noreply@acme-corp.com) for all transactional emails. This improves brand recognition and deliverability for your organization.

Setup Process

  1. 1Provide your desired sender domain (e.g., acme-corp.com) via the admin dashboard or Settings API.
  2. 2Add the required DNS records to your domain: CNAME for mail routing, SPF record, and DKIM public key.
  3. 3Vyntech Account verifies DNS records automatically. Once verified, all emails switch to your custom domain.

Required DNS Records

TypeNameValue
CNAMEmail._domainkeydkim.id.vyntech.com.au
TXT@v=spf1 include:spf.id.vyntech.com.au ~all
CNAMEvyntech._domainkeyvyntech-dkim.id.vyntech.com.au

Enterprise only: Custom sender domains are available exclusively on the Enterprise plan. DNS verification typically completes within 24–48 hours depending on TTL propagation. Contact support if verification takes longer.

Best Practices

Enable login alerts for sensitive tenants

For tenants handling sensitive data, enable login_alert so users are notified immediately when their account is accessed from a new device or IP. This provides an early warning for compromised credentials.

Keep welcome emails enabled for onboarding

Welcome emails improve the onboarding experience by confirming account creation and providing a branded first impression. They also serve as a delivery test — if the welcome email arrives, you know the user's inbox is reachable.

Don't disable password change alerts

Password change confirmation emails are a critical security signal. If an attacker changes a user's password, this email is the first thing that tips the user off. Keep password_change_alert enabled for all tenants.

Test email delivery with the test endpoint

Use POST /api/v1/settings/test-emailto send a test email to a specific address. This verifies that your branding looks correct and that emails are delivered to the user's inbox (not spam).

What's Next

We use cookies and similar technologies to measure traffic and improve the site. You can choose which categories to allow. Manage Preferences.