Unsubscribe Flow UX Recipe

A frictionless offboarding pattern that preserves goodwill and meets legal requirements.

Core Principles

⚡

No re-authentication. No surveys. The link itself is the authority.

🔒

Clicking twice changes nothing. Always show the same success state.

📬

Send a final email confirming the action. No marketing. Just closure.

The unsubscribe link carries a signed token with a short TTL. Structure:

{
  "sub": "user_abc123",
  "list": "product_updates",
  "iat": 1716500000,
  "exp": 1716586400
}

Sign with HMAC-SHA256. Validate server-side. Reject expired or tampered tokens with a generic “link invalid” page.

Skeleton pulse while the token is verified. Under 400ms ideally.

Green checkmark, “You’ve been unsubscribed”, and a single CTA back to the homepage.

Same visual as success but copy reads “You were already unsubscribed.”

Red indicator. “This link is invalid or has expired.” Offer a link to account settings.

Sent after the unsubscribe is processed:

Subject: You’ve been unsubscribed

We’ve removed you from Product Updates. You won’t receive any more emails from this list.

If this was a mistake, you can re-subscribe anytime in your account settings.