hash verification keys sent in email for better protection