Magic links

A magic link is a one-time sign-in link Atlas emails to the user. They click it and they're in — no code to type, no password to remember.

Enable it

1. Sign-in methods → Magic link → toggle on.

2. Set the link expiry.

3. Customize the email under Email & SMS templates.

How it works

1. The user enters their email on the sign-in page.

2. Atlas emails a one-time ticket embedded in a link back to your instance (Atlas uses one-time tickets, never a reusable token sitting in a URL).

3. The user clicks; Atlas validates the ticket, checks expiry and single use, and issues a session.

Same-device vs cross-device

• Same device: the tab that requested the link is signed in automatically once the link is clicked.

• Cross-device: if the user opens the link on a different device (for example, requested on desktop, opened on phone), Atlas completes sign-in on the device that clicked, with anti-phishing checks so a forwarded link can't be abused.

Good practice

• Keep expiry short (minutes) to limit the window if an inbox is compromised.

• Magic links pair well with an authenticator second factor for sensitive apps.

Next

Let users reuse the accounts they already have → Social connections.