Magic links (passwordless client access)
A magic link signs a client into their portal with one click: no password to create, forget or reset. Ideal for busy stakeholders who touch the portal occasionally.
Generating a link
- Go to Clients > Magic links (admins only).
- Find the client and select Generate link; it is copied to your clipboard.
- Send it to the client however you like.
Security properties
- Each link is signed: any tampering with the URL invalidates it.
- Links expire after 7 days; generate a fresh one any time.
- A link signs in exactly one client user to exactly their portal, nothing else.
- Only workspace admins can generate links.
When to use magic links vs passwords
Use magic links for approval-and-review clients who log in a few times per project. Encourage a normal password login for clients who live in the portal daily (agencies-of-record, retainer clients), since links expire.