Magic Link Authentication lets you log in to your Relay account by clicking a single-use link sent to your email, replacing the SMS two-factor authentication step during sign-in.
Who this is for
Magic link authentication is available to every Relay Account holder at sign-in. It helps:
Owners logging in from a new or unrecognized device
Owners logging in from a device that has been trusted before but is not currently remembered
Owners who prefer clicking a link over typing an SMS code
Customers who want a sign-in method that is resistant to SMS-based phishing and SIM-swap attempts
How does magic link authentication work?
Magic link authentication runs in three steps after you enter your password:
Enter your email address and password on the Relay login page.
Open the email from Relay in the same browser or app you used to start the login.
Click the magic link. You are signed in automatically. No SMS code is required.
Magic links expire after 5 minutes and can only be used once.
When do you get a magic link instead of an SMS code?
Relay sends a magic link when the sign-in looks new or unrecognized. Specifically:
You are signing in from a device or browser that has never been trusted before.
You are signing in from a device that was trusted previously but is no longer remembered.
The Relay risk engine has flagged the login for an extra verification step.
On a trusted device, you can also request an SMS code instead by selecting Having trouble logging in? on the sign-in screen.
What is the difference between a trusted device and a remembered device?
A trusted device and a remembered device are two different states, and both affect how often you are prompted for verification.
Trusted device. A device or browser where you have successfully signed in before. Trust lasts about 90 days.
Remembered device. A trusted device where you also selected Remember this device during sign-in. This reduces verification prompts for roughly 30 days.
Trust is removed when you reset your password, switch browsers, or use an incognito or private window.
What should you know before using magic links?
Six details to keep in mind:
Your password is still required. The magic link replaces the SMS two-factor authentication step. It does not replace your password.
Device and browser have to match. The link only works on the exact device and browser where the login started.
The link expires quickly. Magic links are valid for 5 minutes or one click, whichever comes first.
There is a rate limit. You can request up to 6 magic links before a 15-minute cooldown starts.
SMS still shows up in some cases. On a trusted device you can fall back to SMS if the magic link does not arrive. SMS is also required for password resets, high-risk actions, and profile changes. Selecting Remember this device for SMS can reduce prompts for about 30 days.
Email security matters. Keep your inbox secure and do not click suspicious links that claim to come from Relay.
How do you troubleshoot a magic link that is not working?
Most magic-link issues fall into one of three categories. Match the symptom to the fix:
Link expired. The link is older than 5 minutes or has already been used. Request a new link from the sign-in screen and click it within 5 minutes, using the most recent email.
Device or browser mismatch. You started the login on one device or browser and are trying to open the link on another. Request a new link and open it on the same device and browser you used to start the sign-in. On mobile, tap Open in app so the link opens inside the Relay app.
Email did not arrive. Check your Spam and Promotions folders, confirm the email address on your Relay account, and verify any custom inbox filters. If your email has previously bounced, you may need to re-verify the address during sign-in.
If the issue continues after these steps, request an SMS code instead by selecting Having trouble logging in?, or contact Customer Experience.
Frequently asked questions
Do I still need my password to use a magic link?
Yes. Your password is always required first. The magic link replaces the SMS two-factor authentication step, not your password.
How long is a magic link valid?
A magic link is valid for 5 minutes or one use, whichever comes first.
Why did I get a magic link instead of an SMS code?
Magic links are used when you sign in from a new or untrusted device, or when the Relay risk engine challenges a login. On a trusted device, you can switch back to an SMS code using the Having trouble logging in? option on the sign-in screen.
Can I open the magic link on a different device?
No. The link only works on the same device and browser you used to start the login.
How long does a device stay trusted?
About 90 days. Selecting Remember this device reduces future prompts for roughly 30 days. Resetting your password removes trust from every device you have used.
What if the magic link email does not arrive?
Check your Spam and Promotions folders, confirm the email address on your Relay account, and request a new link. You can request up to 6 links before a 15-minute cooldown starts. If your email has previously bounced, you may need to re-verify the address during sign-in.
Can I turn off magic link authentication?
No. Magic links work alongside your other verification methods and cannot be disabled.
Related articles
Talk to our Customer Experience team
If this article did not fully answer your question, our Customer Experience team is here to help.