Yahoo ConnectID links advertising to a cryptographic hash of your email address or phone number rather than to a cookie, which is why clearing your browser does nothing to it. Yahoo runs a public opt-out portal for exactly this, it takes about two minutes, and it does not require a Yahoo account — but it is not finished when you press Submit, and it only covers the one address or number you typed in.
The Short Version
Go to Yahoo's ConnectID opt-out portal, enter the email address and phone number you actually use to sign up for websites, submit, then open the confirmation message Yahoo sends and click the verification link. The opt-out is not complete until you do that last part. Then repeat it for every other address and number you use, because the opt-out applies to the specific identifier you submitted and nothing else.That is the whole procedure. The rest of this guide is about what it does, what it does not do, and why an email-based opt-out behaves differently from every cookie opt-out you have used before.
Yahoo's portal states that a confirmation message and verification link are sent to the email or phone you entered, to validate ownership and complete the opt-out. Submitting the form on its own does not finish the job. If the confirmation never arrives, check spam and promotions folders before assuming the opt-out went through.
What ConnectID Is, Briefly
ConnectID is Yahoo's advertising identifier. Instead of a third-party cookie, it is built from an email address: a participating website or app can pass a hashed version of the address you signed in with to Yahoo, which matches it to an existing identifier or creates a new one. Yahoo's own opt-out page describes the practice as serving ads and linking information using "cryptographic de-identified hashes of email addresses and/or phone numbers."Two consequences follow, and they are the reason this opt-out exists as a separate thing from your browser settings.
First, you do not need to be a Yahoo user. If a site you sign into participates, an identifier can be assigned to your address whether or not you have ever opened Yahoo Mail. Second, the identifier is not stored the way a cookie is. It is derived from something you type in, so it can be recomputed on demand — which means clearing cookies, switching browsers, or moving from a laptop to a phone does not break the link. The same address produces the same hash every time.
The mechanics are covered in more depth in our report on the pending class action over ConnectID, which is where the technical detail and the litigation both live. This page is just the practical side.
How to Opt Out, Step by Step
- Open the opt-out portal Go to the Yahoo ConnectID opt-out page. It is a public form. You do not need a Yahoo account, you do not need to log in, and it does not ask you to create one.
- Enter your email address, your phone number, or both The form has a field for each. Enter them exactly as you use them when signing up for websites — the address itself is the input to the hash, so a variant you never actually use is not the identifier that needs opting out. If you give a mobile number, give the one tied to your accounts.
- Submit the form This starts the process rather than finishing it. Nothing is opted out yet at this point.
- Open the confirmation and click the verification link Yahoo sends a confirmation message with a verification link to whatever you entered, to prove you control it. Following that link is what completes the opt-out. This is the step that quietly fails most often — the message lands in a promotions tab or a filtered folder, nobody opens it, and the opt-out never takes effect.
- Repeat for every address and number you use This is the part that matters most, and the reason is structural rather than bureaucratic. The identifier is the address. Opting out one address says nothing about another, so your work address, the old personal address still attached to a dozen shopping accounts, the throwaway you use for newsletters, and your mobile number are four separate identifiers and need four separate submissions, each with its own verification.
Work from your password manager rather than memory. The addresses worth opting out are the ones sitting in saved logins for retail, news, sports, streaming and real-estate sites — those are the account sign-ups that feed email-based identifiers in the first place. An address you have never used to register anywhere is not doing much.
What Opting Out Does — and What It Doesn't
It is worth being precise here, because "opt out" is doing a lot of work in the ad industry and rarely means what people assume.| What it does | What it does not do |
|---|---|
| Opts the specific address or number you submitted out of Yahoo's use of hashed identifiers for advertising | Cover any other address or number you own — each one is its own submission |
| Applies to the identifier itself, so it is not tied to one browser or device | Delete data already collected — the portal is a use control, not an erasure request |
| Works without a Yahoo account, for people who never used a Yahoo service | Touch other companies' email-based identifiers, which are separate products with separate opt-outs |
| Stays in force without depending on browser storage, unlike legacy cookie opt-outs | Stop cookies, device IDs, IP-based inference, or the first-party tracking done by sites you use directly |
| Takes about two minutes per identifier | Affect any lawsuit, or any legal right you may have |
One nuance worth flagging. Yahoo describes the hashes as "de-identified." The Federal Trade Commission has taken a different view of that word in this context: in a July 2024 post on its Technology Blog, the agency wrote that hashing does not render data anonymous, because a hash that always returns the same value for the same input still works as a persistent identifier for a specific person. Both statements are on the record and readers can weigh them; the opt-out is worth doing either way.
Why This Opt-Out Behaves Differently From a Cookie Opt-Out
If you have used ad-industry opt-out tools before, you have probably had the experience of opting out, clearing your browser a month later, and quietly losing the setting. That happened because the old opt-outs were themselves stored as cookies. Wiping cookies wiped the opt-out along with the tracking it was meant to block, which is a genuinely perverse piece of design.An identifier-based opt-out does not have that problem in the same way. You are not storing a flag in your browser; you are asking a company to suppress a specific identifier on its side. That is why the verification step exists at all — the request has to be attached to an address someone proved they control. The practical upside is that browser hygiene and this opt-out no longer work against each other.
Yahoo does not publish how long an opt-out is retained or what happens if an address later changes hands, so this is not a set-and-forget guarantee. Keep the confirmation message, and re-check the portal if you start seeing targeting that suggests it lapsed.
What to Do Alongside It
An opt-out at one company is a narrow fix for a broad pattern, so it is worth pairing with habits that reduce how many places hold a usable identifier for you in the first place.Use address aliases. Most major mail providers support plus-addressing or generated relay addresses, and Apple's Hide My Email does the same thing at the system level. Different sites then see different addresses, which produce different hashes, which do not join up into one profile. This is the single highest-leverage change available to an ordinary user, because it attacks the join key rather than one company's use of it.
Decline account creation where you can. A large share of email-based identity assignment happens at sign-up, so guest checkout and not registering for a site you will read twice are meaningful choices, not fussy ones.
Use Yahoo's broader privacy controls if you want more than the identifier suppressed. The opt-out portal links to Yahoo's privacy dashboard, which is where access and deletion requests live, and residents of states with comprehensive privacy laws have statutory rights that go further than a voluntary opt-out.
Keep the browser-side protections anyway. Blocking third-party cookies, using tracker-blocking browsers and enabling Global Privacy Control still do real work against everything that is not email-based. These are complementary tools, not competing ones. Our explainer on what actually counts as personally identifiable information covers why pseudonymized data still tends to identify people, which is the assumption underneath all of this.
This Is Not the Same as Opting Out of a Class Action
The phrase collides, and the two things could not be more different, so it is worth separating them plainly.Opting out of a class action settlement means formally excluding yourself from a lawsuit: you give up any payment from it, keep the right to sue on your own, and you have to do it in writing by a court deadline. It is a legal decision with consequences that are hard to reverse. We cover when it makes sense in should you opt out of a class action settlement.
The ConnectID opt-out is a product setting with an advertising company. It has no deadline, no legal effect, and no bearing on any case. Using it does not join a lawsuit, does not waive anything, and does not register you for a payment. There is currently nothing to claim in the pending ConnectID litigation, and anyone telling you otherwise is describing something that does not exist.
Questions
What does the Yahoo ConnectID opt-out actually do?
It is a use opt-out for one identifier. Yahoo states that it serves ads and links information using cryptographic de-identified hashes of email addresses and phone numbers, and the portal opts the address or number you submit out of those uses. It is not a deletion request, it does not close any account, and it does not stop other companies from running their own email-based identifiers.
Do I need a Yahoo account to opt out?
No. The opt-out form is public and asks only for an email address or a phone number. People who have never used a Yahoo service can still be assigned a ConnectID, because participating third-party websites and apps can pass a hashed address to Yahoo when someone signs in, so the opt-out is open to anyone.
Why does the opt-out require verification?
Because otherwise anyone could opt out anyone else's address. Yahoo sends a confirmation message with a verification link to the email or phone submitted, to validate that you control it. The opt-out is not complete until that link is followed, which is the step people most often miss — they submit the form, see a success message, and never open the confirmation.
Does opting out delete the profile Yahoo already built?
The opt-out form is a forward-looking control over how an identifier is used, not a deletion request, and Yahoo's portal does not describe it as erasing past data. Deletion and access requests are handled through Yahoo's privacy controls dashboard and, where a state privacy law applies, through the rights that law provides.
Will clearing my cookies undo the opt-out?
It should not, and that is the useful difference from a legacy cookie-based ad opt-out. Older opt-outs were themselves stored as a cookie, so wiping your browser wiped the opt-out too. This one is submitted against an email address or phone number rather than stored in your browser. Yahoo does not publish how long an opt-out is retained, so treat the verified confirmation as your record.
Is this the same as opting out of a class action settlement?
No, and the two are unrelated. Opting out of a class action means excluding yourself from a lawsuit so you are not bound by its release, which is a legal decision with a court deadline. The ConnectID opt-out is a product setting with an advertising company. Using it does not join, waive, or affect any lawsuit.
Does opting out stop all ad tracking?
No. It addresses one company's identifier. Several other firms operate their own email-based IDs, and cookies, device identifiers, IP-based inference and first-party tracking by the sites you use are all separate. An email-based opt-out is one control among several, not a switch that turns off targeted advertising.
Sources
• Yahoo ConnectID opt-out portal• Yahoo — Technical identifiers and how they are used
• Yahoo Privacy Controls dashboard
• Yahoo ConnectID integration library and documentation
• FTC Technology Blog — "No, hashing still doesn't make your data anonymous" (July 2024)
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
