Signing in with a magic link
How magic links work, why we use them, and what to do if you don't get the email.
2 min read · Updated May 2026
How it works
You enter your email. We send a one-time link. You click the link. You're signed in.
No password to remember, no password to leak. The link expires after 15 minutes and can only be used once.
Why we use them
Passwords are a security hazard. Magic links remove the most common attack vector (credential reuse from leaked databases). They're also easier · most clients sign in once a month and don't want to remember another password.
What if the email doesn't arrive
Check spam first. If still nothing after two minutes, request a new link. If the second one also doesn't arrive, the most likely cause is an aggressive email filter on a corporate or institutional address · try a personal address.
Sign-in on a different device
Magic links work on the same device that requested them. If you're trying to sign in on a phone after requesting the link on a laptop, you'll need to request a new link from the phone. The fix is by design · it prevents an attacker from intercepting a link sent to a stolen email.
Stay signed in
The default session lasts 30 days. Choose 'Keep me signed in' to extend to 90 days. Choose 'Just this once' if you're on a shared device.