A magic link is a one-time sign-in link sent to an email address or, in some services, a phone number. Instead of entering a password, a person opens the link to prove they can access that inbox or device.
How a magic link works
When you enter an account identifier, the service creates a link associated with a sign-in request and sends it to the contact address on file or supplied during login. Opening it usually completes authentication in a browser or app, though the exact steps depend on the service. The link may expire or work only once, which limits the chance that an old message can be reused.
Some services open the account in the same browser where the request began; others ask you to continue in an app. If the link opens an unexpected page or requests information unrelated to signing in, stop and check the service’s normal sign-in route. A magic link proves access to a mailbox or device, not necessarily a person’s identity in every broader sense.
Using one safely
Request the link only from the service you intend to use, then check that the message relates to an action you just started. Avoid forwarding it, posting it in a chat, or sharing a screenshot that reveals the full address. Anyone who obtains an active link may be able to use it, depending on how the account is configured.
The phrase also appears in contexts unrelated to passwordless login, so meaning depends on where it is used. For example, buy magic links is wording that should be understood from its surrounding context, not assumed to describe account authentication. Keeping these meanings distinct helps avoid mistaking a sign-in message for an unrelated offer or reference.
Common problems and checks
If a message does not arrive, check the address you entered, the spam folder, and whether the service has a separate sign-in route for existing accounts. Requesting repeated links can make it unclear which message is current, so use the newest one and follow any on-screen instructions. If a link reports that it is invalid, return to the service directly and start a fresh sign-in rather than relying on a forwarded message.
Magic links can be convenient when a password is forgotten, but they also make email or device security important. Use a private device where possible, lock access to your inbox, and sign out on shared devices. If an unexpected sign-in message arrives, do not open it; review account activity through the service’s usual settings and follow its security guidance.