# Does Bubble expose the used\_email address?

**URL:** <https://forum.bubble.io/t/does-bubble-expose-the-used-email-address/345009>\
**Category:** Questions\
**Created:** [October 21, 2024, 10:17am UTC](https://forum.bubble.io/t/does-bubble-expose-the-used-email-address/345009 "2024-10-21T10:17:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![federico.tomasi](https://avatars.discourse-cdn.com/v4/letter/f/ed8c4c/32.png) [@federico.tomasi](https://forum.bubble.io/u/federico.tomasi)\
**Post date:** [October 21, 2024, 10:17am UTC](https://forum.bubble.io/t/does-bubble-expose-the-used-email-address/345009/1 "2024-10-21T10:17:17Z")

</div>

I have implemented in an app the Linkedin SSO method to sign up.  
Now, as per the bubble manual, if a user who has already registered in the app, tries to sign up using their Linkedin account and this has the same email address used to register in the app, if the user is logged out, an error is triggered. The error shows the CORE used\_email message in an alert that says: “This email is already in use:” followed, after the column, by the actual email address of the user linkedin account (the same already used in the app).  
I would like to change a little bit this message, but I would like to add some text after the email address. If I tweak the CORE message text, the email address is anyway put at the end of the message. So I was thinking about to intercept the error by using the “When an unhandled error occurs” event and show my custom message.  
But when I do that I can’t find if Bubble somewhere exposes that email address so that I can show it in my custom message as well.  
Does anyone know if Bubble exposes this address or if there is a way to get it?  
Thank you!

---

<div class="post-metadata">

**Author:** ![GH5T](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/gh5t/32/209141_2.png) [@GH5T](https://forum.bubble.io/u/GH5T)\
**Post date:** [October 21, 2024, 12:12pm UTC](https://forum.bubble.io/t/does-bubble-expose-the-used-email-address/345009/2 "2024-10-21T12:12:35Z")

</div>

For security purposes, it’s never good practice to even let your users know the email is correct.

Just say the email/password is invalid and call it a day.

If the email OR password is wrong, my apps just say “Wrong email or password”.

When a user resets their email or password, and they enter in an email, the app says “If this account is registered, it will receive an email” type of message.

---

<div class="post-metadata">

**Author:** ![federico.tomasi](https://avatars.discourse-cdn.com/v4/letter/f/ed8c4c/32.png) [@federico.tomasi](https://forum.bubble.io/u/federico.tomasi)\
**Post date:** [October 21, 2024, 12:58pm UTC](https://forum.bubble.io/t/does-bubble-expose-the-used-email-address/345009/3 "2024-10-21T12:58:00Z")

</div>

hey @GH5T ,

that could be a good point, but it is Bubble itself that shows the used email address in its CORE alert/message, when the situation I tried to explain occcurs.  
So I think that in this case it is relatively safe to show it. Also because it is the same email address that the user uses with Linkedin, and for sure they know it.  
Yes, I could avoid to show it, but, in my opinion, if the user can read their email address, they can be sure that there hasn’t been some other type of issue.