For approved @globalgalaxy.org / @teamgalaxy.org addresses: your current mailbox password proves the address is yours. It is checked with the mail server and not stored. No code is needed — skip step 1.