Signing in with a magic link

A magic link is a one-time link, emailed to you, that signs you in without a password. It is also the way back into your account if you have forgotten yours.

Asking for a link

On the sign-in page, type your address into Email and press ✉️ Email me a sign-in link. Leave the password box empty — it is not used. The button only shows in sign-in mode, so if you are looking at the sign-up form, switch back with I already have an account — sign in first.

The page then tells you that if that address has an account, a sign-in link is on its way and expires in 15 minutes. You get that same sentence whether or not the address is registered — deliberately, so the page cannot be used to discover who has an account. Press the button with Email empty and you are asked to fill it in first.

One address may ask for three links an hour. Beyond that the extra requests are quietly dropped: the page still shows the same reassuring sentence, but no further email goes out until the hour has passed. So if a link has not arrived, check your spam folder rather than pressing the button again and again.

The email

The message is titled Your sign-in link and carries a single Sign me in button, with the same link printed underneath as plain text for mail apps that will not show buttons. It is an essential account email, so it still reaches you if you have unsubscribed from product updates.

Fifteen minutes, and one use

The link lasts 15 minutes from the moment you ask for it, and works once. Redeeming it cancels it before your session is issued, so an old sign-in email sitting in your mailbox is no way into your account, and a double-tap cannot mint two sessions.

Asking for a second link replaces the first. Only the newest one works, so if you requested twice, use the newer message.

If a link turns up that you did not ask for, ignore it. It expires by itself and your account is unchanged — nobody has signed in.

Opening the link

The link opens the sign-in page, which shows Signing you in…, redeems the link and carries you on to your dashboard. The used link is stripped out of the address bar straight away, so it is not left sitting in your browser history.

If it has expired or been used

You land on the sign-in page with That sign-in link is invalid or has expired. Please request a new one. The same message covers a link already used, one truncated by your mail app, and one opened more than 15 minutes after you asked. Nothing is wrong with your account: type your address again and press ✉️ Email me a sign-in link for a fresh one. An expired link is cleared the moment it is tried.

It is the same account

A magic link signs you into exactly the account your password would — the same designs, the same workspace and members, the same plan. It is a second door, not a second account. Your password is untouched: it still works afterwards, and nothing is reset.

Signing in this way also confirms your email address, because receiving the link proves the address reaches you. If the confirm-your-email banner was sitting at the top of the app it goes, and the actions that need a confirmed address — sharing a design, inviting a colleague, subscribing — are open to you.

When to reach for one

• You have forgotten your password — this is the route back in. There is no separate password-reset flow to hunt for.
• You are on a borrowed or second device — nothing to type in that a password manager would otherwise hold.
• You have just signed up — one link both signs you in and confirms the address.