ConsumerSecurity

Recovery Checks

Confirm account recovery emails still work, so users aren't locked out when they need them most.

Start with 500 free creditsDocumentation

Email validity · 1 credit per lookup · no monthly fee

Account recovery

backup@sara.me
Still reachable — checked weekly

The problem

Account recovery is the one email that must work, and the one users set once and forget for years. When someone finally needs it, a dead recovery address means a locked-out customer, a support escalation, and an identity-verification process nobody enjoys.

With Encrata

Verify recovery addresses on a schedule, quarterly is plenty. When a recovery mailbox stops accepting mail, prompt the user to update it at their next login, while they still can. A 1-credit check per user per quarter is invisible in your costs; a locked-out enterprise admin is not.

How it works

1

Send the address

Call the validity endpoint with the email address at the moment it enters your system, a form, an import, a checkout.

2

We ask the mail server

Encrata checks syntax, domain and mailbox directly with the receiving server, and flags disposable and typo domains.

3

Act on the verdict

Accept, reject or suggest a correction based on a clear valid / invalid / catch-all / risky verdict. One credit per check.

One call, structured answer

Recovery Checks runs on the email validity lookup at 1 credit per lookup. Same API key, same JSON shape as every other Encrata lookup.

  • Answers come from the mail server itself, not a guess from patterns
  • Disposable and throwaway domains are flagged before they cost you anything
  • 1 credit per check, cheap enough to run on every address you touch
  • Cached results are free, so repeated checks never double-charge
Terminal
curl -X POST "https://encrata.com/api/agent/validate" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email": "sara@acme.com"}'
response.json
{
  "email": "sara@acme.com",
  "status": "valid",
  "reason": "deliverable",
  "disposable": false,
  "confidence": "high",
  "provider": "google",
  "message": "Mailbox exists and accepts mail, safe to send.",
  "credits": 1
}

A quiet background sweep

The implementation is a quiet background job: sweep recovery addresses on a quarterly cycle, write the verdict back, and queue an in-app prompt for anyone whose backup mailbox has died. Don't email the dead address, surface the prompt at next login, when the user can actually fix it.

Escalations that never happen

The payoff is invisible until it isn't: locked-out users who would have become support escalations instead updated their recovery address months earlier. For products with enterprise admins, this check belongs in your account-health score, a workspace whose owner has an unreachable recovery address is one departure away from an orphaned account.

More email validity use cases

View all

Create account

sara@acme.com
Deliverable — safe to accept
Sign up

Signup Validation

Block fake and mistyped emails during account registration, so every new account starts with a working address

SaaSAcquisition
jules@stripe.com
old@defunct.io
ana@vercel.com
1 removed · 2 kept

List Cleaning

Remove invalid and dead addresses before outbound campaigns to keep open rates honest and costs down

MarketingOperations

Bounce rate

↓ 0.4%
JanJul

Bounce Reduction

Cut hard bounces before you hit send and keep your sender reputation and inbox placement intact

MarketingDeliverability
Start with 500 free credits
$curl https://encrata.com/api/agent/lookup -H "Authorization: Bearer YOUR_API_KEY" -d '{"e": "satya@microsoft.com"}'