Account Security Alert Email Template

Variables

{{company_name}}

Product or company name

{{recipient_name}}

Recipient display name

{{event_name}}

Plain-language security event

{{event_time}}

Unambiguous time and timezone

{{event_device}}

Non-sensitive device context

{{event_location}}

Clearly labeled approximate location

{{review_url}}

Authenticated first-party security page

{{support_email}}

Security contact

{{company_address}}

Company mailing address

Implementation notes

• Link only to your first-party HTTPS origin and never ask for a password by email.
• Describe location as approximate when inferred from an IP address.
• Make the account-security page require normal authentication before sensitive changes.

Use your renderer to escape untrusted values. Generate a meaningful plain-text alternative and test the final server-rendered message in recipient clients you support.