Why does Visma Connect require a verified email address?

Secure resetting of your account

Without a verified email address, we have no secure way of helping you to reset a forgotten password. The email address is necessary so we can check that it is you who is requesting the resetting.

Quick handling in case of security incidents

If we detect deviating activity on your account – for example, a login attempt from a new device or a new country – we must be able to reach you directly. We can neither rely on nor wait for this kind of information to be passed via an Administrator. Direct communication with you by email minimises the risk if your account is exposed to a threat.

Stronger protection against unauthorised access

Optional user names, such as "admin", "user1" or "firstname.lastname", are extremely vulnerable to so-called bot attacks. This kind of attack involves attackers testing common user names against stolen passwords (credential stuffing). A unique email address makes it significantly more difficult for unauthorised persons to guess your login information. This drastically reduces the risk of account takeovers.