Glossary
What is a magic link login?
A magic link is a one-time sign-in link a site emails you instead of asking for a password. Clicking it logs you in, usually within a short expiry window. It removes passwords but depends on email access, which also makes it a step where an agent needs the user's inbox or the user's help.
How it works
You enter your email; the site sends a link with a single-use token; clicking it within the time limit signs you in. Some sites send a short code instead of a link.
Pros and cons
| Pros | Cons |
|---|---|
| No passwords | Depends on email delivery |
| Simple for users | Slower than a saved password |
| Fewer credential leaks | Email account security is everything |
For agents
An agent can request the link, but someone has to open it from the inbox. Some setups give the agent controlled access to a dedicated inbox used only for launch accounts; otherwise, the agent pauses and the user clicks the link.
Example
A directory uses magic-link sign-in. The founder's agent enters her launch email, waits, she clicks the link on her laptop, and the agent continues in the now-signed-in session.
FAQ
Are magic links secure?
As secure as your email account and the link's expiry and single use.
Why didn't my magic link arrive?
Spam filters, typos or delays; check spam and request again.
Is a magic link the same as a passkey?
No. Passkeys use device-based cryptography; magic links use email.
Can I open a magic link on a different device?
It depends on the site; some require the same browser that requested it.