Email-primary users can sign in with a one-time link or six-digit code
Coming soon
The magic-link backend (rate limiting, CAPTCHA, constant-time response, and the branded email template) ships with this release. The Email me a link button on the sign-in page lands in a follow-up release. For now, email-primary users sign in with their password, and the Forgot password link covers password-reset recovery.
Who can use magic links
Magic links are available to users whose primary sign-in method is email and password. If your primary method is Google or Microsoft, sign in through the matching provider button on the sign-in page instead.
How it will work
Open the sign-in page, choose Email me a link, and enter your address. Within a minute you will receive an email with two ways to sign in:
Tap the button to sign in on the same device that requested the link.
Type the six-digit code on the sign-in page if you opened your inbox on a different device. The code expires 15 minutes after issuance.
Security choices we made
Magic-link requests are rate-limited, require a CAPTCHA, and run on a constant-time response so an attacker cannot tell whether an email exists in our system. We send a maximum of five links per address per hour.
Did not receive the email?
Check spam and quarantine folders.
Confirm the address you entered matches the one on file.
If the address is correct but no email arrives, ask your administrator whether your account was migrated to a different sign-in method recently.