Do you support magic links?
- Topic
- Sign-in & authentication
- Asked by
- Developers
AdminUpdated Sep 11, 2026
Magic links are supported as a passwordless sign-in method. A user enters their email, receives a one-time link, and clicking it signs them in.
Security details worth knowing:
Links use one-time tickets — they can't be replayed after use.
No session token ever travels in the URL, so it can't leak through browser history, referrer headers or server logs.
Links are time-limited and origin-checked.
You can customize the email template and sender in the dashboard's messaging settings. See the magic links guide.
Yes. Magic links let users sign in by clicking a one-time link sent to their email — no password. The links use one-time tickets and never carry a session token in the URL.
Was this page helpful?