I have a wordpress website that has an account sign-up/login system.

When a user creates an account from the website’s signup page (not the wp-admin page), he has to confirm the email link (in his mail inbox) prior to being able to login.

However, if the user goes to mywebsite.com/wp-admin, he is able to login and access website’s resources as a logged in user without having to confirm his email.

I suppose disabling access to wp-admin is not an option as it will create issues since wp-admin is required for proper functioning of the website.

Any suggestions would be really appreciated.