Magic Link

A magic link is a one-time-use authentication URL sent to a user's email or phone, allowing login without typing a password. Clicking the link signs the user in for a defined session. Magic links eliminate password-friction for users who only access an app occasionally — common in event RSVP, ticket purchase, and member-portal flows. Modern implementations include short expiration (5-60 min), single-use enforcement, and device fingerprinting.