--- title: Account Security Alert Email Template | SendHQ description: A calm, factual security notification with event context, separate expected and unexpected paths, and no credential collection. canonical: https://sendhq.cc/templates/security-alert last-updated: 2026-08-24 --- # Account Security Alert Email Template A calm, factual security notification with event context, separate expected and unexpected paths, and no credential collection. ## Production-oriented source ```html Security alert for your {{company_name}} account
{{preheader}}͏ ‌     
``` ## Variables **`{{company_name}}`** Product or company name **`{{recipient_name}}`** Recipient display name **`{{event_name}}`** Plain-language security event **`{{event_time}}`** Unambiguous time and timezone **`{{event_device}}`** Non-sensitive device context **`{{event_location}}`** Clearly labeled approximate location **`{{review_url}}`** Authenticated first-party security page **`{{support_email}}`** Security contact **`{{company_address}}`** Company mailing address ## Implementation notes - Link only to your first-party HTTPS origin and never ask for a password by email. - Describe location as approximate when inferred from an IP address. - Make the account-security page require normal authentication before sensitive changes. Use your renderer to escape untrusted values. Generate a meaningful plain-text alternative and test the final server-rendered message in recipient clients you support. ## More transactional templates - [Email Verification Template](https://sendhq.cc/templates/email-verification.md): An accessible verification email with a clear action, visible fallback URL, expiration context, and safe ignore-state copy. - [Password Reset Email Template](https://sendhq.cc/templates/password-reset.md): A focused password-reset email with a single-use action, expiration notice, fallback link, and security guidance. - [Magic Link Sign-In Email Template](https://sendhq.cc/templates/magic-link.md): A concise passwordless sign-in email that explains device context, expiration, and what to do with an unexpected request.