What happens under the hood
- 01User enters email address
- 02A time-limited email with a signed token is sent to their inbox
- 03User clicks the link; Descope validates the signed token and completes sign-in
- 04Session is established, JWT is issued
Key tradeoffs
✓ Zero password management for users or you
✗ Requires inbox access at login. Breaks on shared/corp email filters
✓ Email is implicitly verified on first login
✗ Context switch (app → email → back) causes mobile drop-off
✓ Simple to implement, works everywhere
✗ Link expiry causes confusion if user delays clicking
Try it live
→ Enter your email and click Continue. Check your inbox for a login link, it should arrive within 30 seconds.