Registration of new accounts to the Arch AUR reopened with hardened requirements

exploraz2 pts0 comments

Re: AUR registration disabled - Aur-general - lists.archlinux.org

&times;<br>Keyboard Shortcuts

Thread View

j: Next unread message

k: Previous unread message

j a: Jump to all threads<br>j l: Jump to MailingList overview

thread

Re: AUR registration disabled

Leonidas Spyropoulos

13 Jul

2026

13 Jul

'26

7:25 p.m.

On 15/06/2026 09:01, Leonidas Spyropoulos wrote:

...<br>Hey all,

Due to the current influx of malicious packages uploaded to AUR<br>registration of new accounts is currently disabled while we are working<br>on the cleanup.

Thanks for your understanding.

Cheers,<br>artafinde on behalf of Dev Ops of Archlinux

Hi all,

Registration to the AUR is now reopened. The new release includes<br>changes to harden account registration.

Summary of related changes:<br>- Disposable email addresses are now rejected.<br>- Email verification is now mandatory, most users are unaffected but new<br>accounts must verify their email address via a time-limited token which<br>is valid for 24 hours.<br>- Email changes are locked during the verification cooldown.

If you spot suspicious registration activity or packages, please flag<br>them in ML as usual.

Thanks,

Leonidas Spyropoulos<br>Developer & DevOps<br>PGP: 59E43E106B247368<br>244740D17C7FD0EC

Attachments:

OpenPGP_0x244740D17C7FD0EC.asc<br>(application/pgp-keys — 961 bytes)

OpenPGP_signature.asc<br>(application/pgp-signature — 228 bytes)

Back to the thread

Back to the list

registration email accounts disabled thread leonidas

Related Articles