Magic Link Sign-in
Let co-owners sign in without a password using a one-time email link.
What is a magic link?#
A magic link is a single-use URL sent by email. When the co-owner clicks it, they're automatically signed in to their account — no password required. It's the recommended method for non-technical users.
Why not a password?#
- Less support: no more "I forgot my password"
- More secure: no weak or reused password to compromise
- Bill 25 compliant: no user-stored secret
How it works#
The co-owner requests access
On the portal sign-in page, they enter their email and click Send link.
They receive an email
Email sent instantly with a Sign me in button. The link is valid for 15 minutes.
They're signed in automatically
One click on the button, and they're in. Session lasts 7 days by default.
Configure magic links#
Magic links are enabled by default for all syndicates. Settings are available from Settings → Security:
| Setting | Default |
|---|---|
| Link validity duration | 15 minutes |
| Session duration | 7 days |
| 2FA required after link | Optional |
For syndicates that require 2FA (Bill 25), the co-owner will enter their 2FA code after clicking the magic link.
Security#
- The link is single-use — once used, it's invalidated
- The link is sent only to the registered email address
- Repeated attempts are rate-limited (5 per hour per email)
Remind your co-owners they must never forward a magic link — doing so gives direct account access.
Alternatives#
If a co-owner prefers:
- Password: they can set one from Settings → Security in the portal
- Passkey: biometric authentication (Touch ID, Windows Hello) — see Security