> ## Documentation Index
> Fetch the complete documentation index at: https://veriqa.app/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Sign-in by email

> Three ways to sign in by email — the one-tap email from a QR code, a six-digit code and a magic link — and why the one-tap email is simpler and safer.

Users sign in by email in one of three ways: the one-tap email, a code from an email or a magic link.
You can offer them side by side and choose which one the sign-in page offers first.

## One-tap email

The sign-in page shows a QR code. The user scans it, and the phone opens an email that is already
addressed and filled in with a secret token. The user taps Send, and the sign-in completes on the
screen. On the same device a button opens the same email.

![Signing in on a computer by email: QR code, phone camera, the user sends a ready-made email, the page verifies the sender, and the user confirms the sign-in on the computer.](https://mintcdn.com/veriqa/ccCax_wh-JmrZJTK/images/examples/en-email-cross-device.webp?fit=max\&auto=format\&n=ccCax_wh-JmrZJTK\&q=85\&s=f09bc7035c1c42fdb2ab4b59e4679914)

On a computer: a QR code, a ready-made email, the page verifies the sender, and the user confirms the sign-in there.

![Signing in on a phone by email: the user taps the email button and sends a ready-made email, the page verifies the sender, and the user confirms the sign-in.](https://mintcdn.com/veriqa/ccCax_wh-JmrZJTK/images/examples/en-email-phone.webp?fit=max\&auto=format\&n=ccCax_wh-JmrZJTK\&q=85\&s=454374ad99e15d2e71f36a3187836041)

On a phone: the email button, a ready-made email and the same check.

Why it is better than a code or a link:

* **Fewer steps:** nothing to type and no switching to the mailbox and back.
* **No waiting:** nothing has to reach the user, so there is no spam folder and no delayed email.
* **Proof of the mailbox:** sending the email shows that the user controls the mailbox, and the
  sender is checked against DMARC.
* **Nothing for a mail gateway to use up:** corporate mail protection opens the links in incoming
  email, and the email the user sends has none.
* **One habit:** it is the same [secret message](https://veriqa.app/docs/guides/supported-channels.md#secret-message) the
  messaging apps use, only as an email.

The one-tap email needs a way to receive mail and a sender policy. A separate inbound mail provider
is not required: Veriqa can read an ordinary mailbox itself — see
[One-tap email over IMAP](https://veriqa.app/docs/guides/channels.md#one-tap-email-over-imap).

## Code from an email

The user enters their address and gets an email with a six-digit code to enter on the same page. The
code is valid until the time the email states, five attempts are allowed by default, and every new
email brings a new code.

## Magic link

The user enters their address and gets an email with a link. Opening the link does not use it up:
the sign-in goes on only after a button on the page is pressed, so a mail gateway that checks links
cannot move the sign-in forward. One email can carry both the link and the code — whichever the user
uses first counts.

## How to set it up

The channel is turned on in the [Email](https://veriqa.app/docs/guides/channels.md#email) section of Channel setup. The same
section explains [which way to choose](https://veriqa.app/docs/guides/channels.md#which-mode-to-choose) and
[what the email carries: a link, a code or both](https://veriqa.app/docs/guides/channels.md#link-code-or-both).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.