Manual:$wgRequirePasswordforEmailChange

Details
Set to  to require users to enter their password to change their e-mail address. Set to  to disable this requirement.