Currently the verification email for email address changes has a time limit of 2 hours. This limit is very short for our organizations & staff. There is understanding that this is in place for security. We would prefer to see 24 hours or it be customizable based on an organization's risk tolerance.

In our environment 2 hours is too short so we end having to go through the process multiple times to send multiple verification emails to the user. Typically, users send an email staff requesting the change. Staff review the request withing their workload and make the update triggering the verification email. The user has no idea when the verification email will be sent and so they are not waiting for it in order to verify. By the time they are able to get back to / see the email the 2 hour time limit has expired. This causes significant frustration on both side - staff and external users - for having to repeat the process multiple times.

Format of email is also a concern as it is being flagged as spam. Idea 'Formatting control for email confirmation templates' has been upvoted.