Magic links
A magic link is a single-use sign-in link sent to a client's email. They click it and they're signed in, no password to remember.
How clients use it
The magic-link sign-in lives at {yourdomain}/magic-login (a separate page from the main portal sign-in form). The client opens that URL, enters their email, gets a sign-in link by email, and clicks it to sign in.
Magic links are an alternative to passwords, not a replacement. Clients who set up a portal account with a password can keep using their password from the main sign-in page, magic links are a separate door for clients who prefer them or have lost their password.
When this helps
Magic links work well for clients who:
- Don't want to manage another password
- Sign in infrequently, once a month to check an invoice, occasionally to review a deliverable
- Have lost their password and don't want to do a full reset flow
For clients who sign in daily, a marketing director on a retainer, for example, passwords are usually friendlier.
Sending a magic link from your end
You don't need to do anything to enable magic links, the /magic-login URL is available automatically on every workspace. If a client emails you saying they can't sign in with their password, point them at {yourdomain}/magic-login. It's the fastest way to get them back in without walking them through password reset.
Security
Each magic link is single-use and time-limited. Once used (or once it expires), the same link can't be reused, clients can request a fresh one whenever they need it.
