DEV Community

Discussion on: Do you use Magic links?

Collapse
 
pke profile image
Philipp Kursawe

It's not about trust only. If the email provider scans your emails and executes your login links you will instantly see that when you want to use the link. It has been used.

Your inbox is your single point of failure. So it needs your strongest password. Its your only fallback when you forget passwords to other sites and get "reset" links.

I say: when you implement "reset" links you can also support just magic links.