How would you handle site account email changing?

In example email the original address or send a single one to new address?

[JAB Creations]

How would you setup or have setup (if you've written your own software) a feature for members on your site to change their email address?

In example would you first send an email to the original email or simply send one to the new email address? What are the pros and cons?

The only thing I'm certain about is requiring the password in case the person walks away for a moment and someone else walks up to their computer.

- John

[MichaelBluejay]

Best practices is to also re-ask for a password when changing account-specific data (name, password, email, etc.).

I would certainly send a message to the old address, to let them know that a request to change the address was made, so that if someone is trying to hijack their account, they'll get a message about it.

[piatkow]

Experience from complaints on user forums elsewhere suggests that the standard way for a member of the public to go about changing an email address is:

1. Open new account
2. Close old account
3. Tell people
4. Complain because accounts which require confirmation at the old address don't get changed

I agree that confirmation should go to the old address but warn people in advance that for security reasons all changes must be confirmed from the old address.