Magic/Tragic Email Links: Don't make them the only option

Magic/Tragic Email Links: Don't make them the only option

1/7/2025

notes

with many approaches to authentication, they challenge both developers and users. using only magic links is a bold choice that will certainly allienate some users, but likely not everyone.

i personally don't like them, so it's nice to understand some of the edges.

link

https://recyclebin.zip/posts/annoyinglinks/

summary

The article discusses the drawbacks of using magic email links as the sole login method for websites. While acknowledging their security benefits, the author points out their inconvenience for users with multiple devices or who prefer faster login methods. The author argues that magic links are slower, less mobile-friendly, and present indirect security risks. The article concludes by suggesting that if websites insist on using magic links, they should also offer robust alternatives like passkeys, especially if their audience is tech-savvy and privacy-focused.

tags

magic links ꞏ email login ꞏ passwordless authentication ꞏ security ꞏ usability ꞏ user experience ꞏ passkeys ꞏ 404 media ꞏ autho ꞏ stratechery ꞏ multiple devices ꞏ mobile ꞏ privacy