Magic Link Authentication

Sign in without a password using secure email links.

Overview

Magic links provide passwordless authentication by sending a one-time login link to your email. Benefits include:

• No password to remember
• Resistant to credential stuffing attacks
• Quick and convenient access

How It Works

sequenceDiagram
    participant User
    participant Alpha
    participant Email

    User->>Alpha: Enter email address
    Alpha->>Alpha: Generate secure token
    Alpha->>Email: Send magic link
    Email->>User: Receive email
    User->>Alpha: Click magic link
    Alpha->>Alpha: Validate token
    Alpha->>User: Grant access

Using Magic Link Sign In

Step 1: Request Magic Link

1. Go to your organization's login page
2. Click Magic Link or Sign in with Email
3. Enter your email address
4. Click Send Magic Link

Step 2: Check Your Email

1. Open your email inbox
2. Look for email from Alpha Platform
3. Subject: "Sign in to Alpha Platform"

Step 3: Click the Link

1. Open the email
2. Click Sign In or the magic link
3. You'll be automatically logged in

Step 4: Access Confirmation

• A new browser tab may open
• You're redirected to the dashboard
• Session is established

Link Expiration

Magic links have security limitations:

Troubleshooting

Email Not Received

If you don't receive the magic link:

1. Check spam/junk folder - May be filtered
2. Verify email address - Ensure correct spelling
3. Wait a few minutes - Delivery may be delayed
4. Request again - Click "Resend" if available
5. Contact IT - Email delivery may be blocked

Link Not Working

If clicking the link shows an error:

1. Link expired - Request a new one (valid 15 minutes)
2. Already used - Each link works once only
3. Copy/paste issue - Ensure full URL is used
4. Browser issue - Try different browser

Opens Wrong Account

If signed into wrong account:

1. Sign out completely
2. Request new magic link
3. Ensure correct email is used

Best Practices

For Users

• Use only on devices you control
• Click the link promptly (within 15 minutes)
• Delete the email after use
• Request new link if unsure about security

For Mobile

Magic links work on mobile devices:

1. Receive email on phone
2. Tap the link
3. Opens in default browser
4. Complete sign in

When to Use Magic Links

Ideal for:

• Occasional access users
• Forgotten passwords
• Quick sign-in needs
• Users uncomfortable with password management

Consider alternatives for:

• Frequent daily access (passkey is faster)
• Areas with unreliable email
• Shared email accounts (security risk)

Related