# The limitations of offering only magic-link authentication

DevFeed: [The limitations of offering only magic-link authentication](<https://devfeed.tech/articles/the-bullcrappery-that-is-offering-only-magic-link-authentication-28191.md>)

Original publisher: [Read original article](<http://fuzzyblog.io/blog/login/2020/03/12/the-bullcrappery-that-is-offering-only-magic-link-authentication.html>)

Author: Fuzzygroup

Published: 2020-03-12T00:00:00Z

Content type: opinion

Language: en

Sources: [Scott Johnson](<https://devfeed.tech/sources/scott-johnson.md>)

Topics: [Authentication](<https://devfeed.tech/topics/authentication.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [Slack](<https://devfeed.tech/topics/slack.md>), [browser](<https://devfeed.tech/topics/browser.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [browser](<https://devfeed.tech/tags/browser.md>), [login](<https://devfeed.tech/tags/login.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [slack](<https://devfeed.tech/tags/slack.md>)

## AI overview

The author criticizes SimpleAnalytics for offering only magic-link authentication. They explain that a three-hour email-link duration makes account access difficult when a co-founder cannot access the author's email, and argue that an additional authentication option would better support shared accounts.

## Source excerpt

So I just signed up a new service, SimpleAnalytics because, well, if I never look again at Google Analytics then I'll be happy as hell. I can't say enough bad things about Google Analytics - and I've been using it since it was Urchin. Simple Analytics appears to be an impressive tool and I want to launching something, well, TODAY so when they offered a simple signup and easy to use workflow, I bit. I even gave them a credit card. And then I went to add my co-founder on this project to it and, well, crap. They only offer Magic Link authentication. Sigh. censored Magic Link Authentication is that beautiful concept that Slack pioneered where they just: Email you a link to authenticate with. You click the link and WHAM! You're in. No account stuff. No password. And it feels like magic. I was blown away by this the first time I used it in Slack and I, well, I actually did a small bow towards Silicon Valley and the awesomeness that is Stuart Butterfield (he is the guy behind Slack, the guy behind Flickr and the guy behind Game Never Ending). Stuart is awesome (imho but so is Caterina also of course). But Magic Link Authentication isn't supposed to be your only approach to authentication. Tomorrow I leave my home office for a long weekend. The Magic Link Authentication email that I just forwarded to my partner on this project has a duration of only 3 hours. My partner doesn't have access to my email (and nor should they; it is my damn email). So let's say that they somehow need to re-authenticate (browser crash; cookie expire; whatever), their only option is to send me a text message that begs: Please kind partner of mine - will you request a Magic Link again and then wait for the email to arrive to you and then please forward it on to me? That's absolute crap imho. Usernames and passwords are not that damn hard. As a company SimpleAnalytics is on a $360,000 run rate - figure out a way to add a second person onto the damn account. Disclaimer For all my bitching: I like the