Magic Link.
A passwordless authentication method that emails a single-use, short-lived URL the user clicks to sign in.
Magic links became popular in 2018–2020 as the primary alternative to passwords for low-friction B2C apps. Their popularity has plateaued as passkeys have matured, passkeys offer better security (phishing-resistant by construction) and similar convenience. The remaining 2026 use cases for magic links: recovery flows, low-friction signup before the user has enrolled passkeys, and apps where email-account-strength is acceptable.
Common questions
Are magic links secure?
When should I use magic links vs passkeys?
Why do magic links expire so quickly?