Email validation is the check that lets a contact form accept an address. It looks at the shape. A mailbox that does not exist can still pass.
The visitor sees a quiet field, or a green check. The tasting date, the leak, the quote: those only arrive if that address can receive mail.
The Browser Looks at the Shape
MDN’s page on the email input says the value is checked before the form can be submitted. For a single address, two kinds of text get through: an empty string, or one properly formed address. That address can be username@domain or [email protected].
MDN is plain about the second case. A properly formed address “doesn’t necessarily mean the email address exists, but it is at least formatted correctly.”
The browser is checking the pattern, not the inbox. hello@ fails. [email protected] passes, even if that domain never had a mailbox. A list of addresses passes only when the field has the multiple attribute.
<label for="email">Email</label>
<input id="email" name="email" type="email" />That type="email" is the whole check on the page. It does not ask a mail server whether anyone is home.
An Empty Field Is Not a Type Mismatch
The HTML standard says the field is suffering from a type mismatch while the value is neither the empty string nor a single valid email address. The document’s “Last Updated” stamp reads 16 October 2026. That stamp covers the whole standard. It is not a claim that the email rule was rewritten that day.
An empty box is not, by itself, a type mismatch. A string with no @ is. A second address in a field that is not marked multiple is too. The visitor can still type a bad address. The standard allows the browser to let them. The mismatch is what stops the submit.
The Green Check Does Not Mean the Mail Arrives
Picture a catering form for a bakery in Decatur. The customer types [email protected] and hits Send. The field stays quiet. There is no such mailbox. The tasting request bounces, and the bakery’s week looks empty.
That is a different question from whether the answers stay in the link. GET and POST decide where the note travels. Email validation decides whether the address was shaped like an address before it left.
Form layout still matters: a label that says “Email”, a field the thumb can hit. The check after the click is the part the customer never sees fail.
MDN adds a second limit. A visitor can change the HTML, so this check is not a security check. When the text has security implications, the site has to verify the address on the server. Format on the page is not that verification, and it still does not prove the mailbox exists.
Open the Form and Type a Fake Address
Use your own contact form. Type an address with an @ and a domain you know is not yours. If the field accepts it, that is email validation doing its job. It is not proof the message can land.
A lead that cannot be delivered is not a lead. If jobs arrive through that form, the address check is part of the product. We build that kind of site on our website design page.
Bring the form URL and one address you know should bounce. Fifteen minutes on the calendar is enough to see whether the green check is the only check.
