Skip to main content
Users sign in by email in one of three ways: the one-tap email, a code from an email or a magic link. You can offer them side by side and choose which one the sign-in page offers first.

​
One-tap email

The sign-in page shows a QR code. The user scans it, and the phone opens an email that is already addressed and filled in with a secret token. The user taps Send, and the sign-in completes on the screen. On the same device a button opens the same email.
Signing in on a computer by email: QR code, phone camera, the user sends a ready-made email, the page verifies the sender, and the user confirms the sign-in on the computer.

On a computer: a QR code, a ready-made email, the page verifies the sender, and the user confirms the sign-in there.

Signing in on a phone by email: the user taps the email button and sends a ready-made email, the page verifies the sender, and the user confirms the sign-in.

On a phone: the email button, a ready-made email and the same check.

Why it is better than a code or a link:
  • Fewer steps: nothing to type and no switching to the mailbox and back.
  • No waiting: nothing has to reach the user, so there is no spam folder and no delayed email.
  • Proof of the mailbox: sending the email shows that the user controls the mailbox, and the sender is checked against DMARC.
  • Nothing for a mail gateway to use up: corporate mail protection opens the links in incoming email, and the email the user sends has none.
  • One habit: it is the same secret message the messaging apps use, only as an email.
The one-tap email needs a way to receive mail and a sender policy. A separate inbound mail provider is not required: Veriqa can read an ordinary mailbox itself — see One-tap email over IMAP.

​
Code from an email

The user enters their address and gets an email with a six-digit code to enter on the same page. The code is valid until the time the email states, five attempts are allowed by default, and every new email brings a new code. The user enters their address and gets an email with a link. Opening the link does not use it up: the sign-in goes on only after a button on the page is pressed, so a mail gateway that checks links cannot move the sign-in forward. One email can carry both the link and the code — whichever the user uses first counts.

​
How to set it up

The channel is turned on in the Email section of Channel setup. The same section explains which way to choose and what the email carries: a link, a code or both.