A step where your app emails a link to a new user's address and asks them to click it before their account is fully active. It proves they actually own that address, which cuts down on fake accounts and makes password recovery possible.