Magic Link Login
A magic link is a one-time URL emailed to a member that logs them into the Member Portal without a password. Magic links are the primary login method for everyday members. They don't have to remember a password or set one up. Members can also create a password later if they prefer traditional login.
This article explains how magic links work, how members request them, what happens when they click, and how to troubleshoot common issues.
How It Works (Member Walkthrough)
- The member visits your church's portal login page (e.g.,
https://app.timelychurch.com/c/{your-church}/login). - On the Magic Link tab ("We'll email you a secure sign-in link"), they enter their email address and click Send Magic Link.
- The platform generates a unique, single-use link tied to that email and your church.
- An email arrives within seconds with a Log In button.
- The member clicks the button, the link is validated, and they're logged into the Member Portal automatically.
- The link is marked as "used" the moment it's verified. It cannot be used a second time.
If the member has 2FA enabled, clicking the magic link sends them to the 2FA challenge page instead of logging them straight in.
Expiry
Magic links expire 30 minutes after being generated. After that, clicking the link shows a "Link expired" error page and the member must request a new one.
Requesting a new link does not cancel one that is already on its way. If a member asks for a second link while the first email is still arriving, either link works. Whichever one they open first logs them in, and each link still works only once.
What Happens When You Click
When a member clicks the link, the platform:
- Confirms the link matches the church it was issued for.
- Rejects the link if it has already been used, has expired, or isn't recognized.
- Marks the link as used, then signs the member into their portal session.
- Sets up the member's login automatically the first time they click, if they've never logged in before. For a member who was added by their church but has never signed in, the first magic-link click finishes setting up their account and connects it to the church as a member.
- Confirms the member's email as verified (since they proved ownership of the inbox by clicking the link).
- If the member has 2FA enabled, sends them to the 2FA challenge.
- Otherwise, logs them in (keeping them signed in) and takes them to the page they were originally trying to reach, or the portal dashboard if there wasn't one.
For security, members are only ever returned to a page on your church's own portal or custom domain after logging in.
Member Self-Service Registration
If a member doesn't yet have a record in your church, they can register themselves from the portal's Register page:
- On Create Your Account, they enter first name, last name, email, and (optional) phone, then click Create Account & Send Login Link.
- The platform creates their record (marked as a visitor) and emails a magic link.
- Clicking the link finalizes their account just like a regular login.
If a record with that email already exists, the registration form skips the create step and just sends them a magic link with a "Welcome back!" message.
Troubleshooting
"I didn't receive the email"
- Check spam/junk folder: Magic link emails are time-sensitive and sometimes get filtered.
- Verify the email address matches your member record: The platform only sends a link if the email matches a person in the church (to protect members' privacy). Either way the form shows the same message: "If your email is registered with … you will receive a login link shortly. It can take a minute or two to arrive — check spam. Requesting again won't cancel it." So no email arrives if the address doesn't match.
- Check whether you've unsubscribed from emails: If a member has previously unsubscribed from all emails, magic-link emails are typically still delivered (since they're security-related), but it's worth verifying with a church admin.
- Try requesting again: A fresh email is sent, and the earlier link keeps working too.
"Link Expired" error
The link is older than 30 minutes. Request a new one from the login form.
"Link Already Used" or "Link Not Found" error
Magic links are single-use by design, so a link that was already used can't be opened again. Request a new one.
"Account Not Found" error after clicking
The member's record was deleted or anonymized between when the link was sent and when it was clicked. Contact a church admin to verify account status.
Custom-domain churches
If your church has a custom domain configured, magic links use the custom domain in the URL. After login, members are only ever returned to a page on the platform or the church's own custom domain.
Sending a member a sign-in link yourself
An admin can email a member a sign-in link from the member's profile: go to People, open the person, open the ⋯ (actions) menu and choose Send sign-in link. You'll see "Sign-in link sent to …". The person needs an email address on their profile, and your role needs to be able to edit people.
Magic Link vs Password Login
Both options are available on every portal login page, on the Magic Link and Password tabs:
| Magic Link | Password |
|---|---|
| Passwordless: nothing to remember | Requires set-up via "Forgot Password" or registration |
| One-time, expires in 30 minutes | Reusable until the user changes it |
| Always single-use | Protected against repeated guessing attempts |
| Recommended for casual members | Useful for staff who log in frequently |
A single member can use either method on any given login. The platform doesn't lock them into one or the other.
Related Articles
- Communication Overview
- Email Templates: The magic link login email template
- Sending Emails