"schmatz" wrote : | This is not save! If you enter a wrong email address someone else gets your email, can log in, and sees your details. | well, it's not that bad:* the other user cannot login - he does not know your password* since you have never logged in before, there are no "personal details"but, you are right: it would be safer, if the user had to login before activating her account View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4127045#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...