Magic Link Authentication

Magic Link Authentication

Curl Budget uses passwordless authentication via magic links. Instead of remembering a password, you receive a secure link to your email that logs you in automatically.

How It Works

Requesting a Link

When you want to sign in:

1. Enter your email address
2. Tap "Send Magic Link"
3. A unique, secure link is sent to your email
4. The link is valid for a limited time

Using the Link

When you receive the email:

1. Open the email from Curl Budget
2. Tap the magic link
3. You're automatically signed in
4. The app opens and you're ready to use it

Link Security

Each magic link is:

• Unique - Generated specifically for your login request
• Time-limited - Expires after a short period
• Single-use - Can only be used once
• Tied to your email - Only works for the email it was sent to

Why Magic Links?

No Password to Remember

You never have to:

• Create a password
• Remember a password
• Reset a forgotten password
• Update a compromised password

Your email is your authentication.

Security Benefits

Magic links are more secure than passwords because:

• No password to steal or guess
• Links expire quickly
• Each login requires access to your email
• Phishing is harder without a password field

Convenience

Login is simple:

• Enter email
• Click link
• Done

No typing complex passwords on a phone keyboard.

First-Time Sign Up

When you first create an account:

1. Enter your email address
2. Tap "Continue"
3. Magic link is sent
4. Click the link in your email
5. Your account is created and you're signed in

No separate sign-up process—just enter your email and verify.

Signing In Later

When returning to Curl Budget:

1. Open the app
2. Enter your email
3. Request a new magic link
4. Check your email and tap the link
5. You're signed in

Staying Signed In

You don't need to sign in every time:

• The app keeps you signed in
• Sign in is only needed after signing out or on a new device
• Sessions last until you explicitly sign out

Troubleshooting

Didn't Receive the Email

If the magic link email doesn't arrive:

1. Check spam/junk folder - Magic links sometimes get filtered
2. Wait a moment - Emails can take a minute to arrive
3. Verify your email address - Make sure you typed it correctly
4. Request again - Tap "Resend" to get a new link
5. Check email filters - Corporate email may block external links

Link Expired

Magic links expire for security. If yours expired:

1. Return to the app
2. Request a new magic link
3. Use the new link promptly

Link Already Used

Each link works only once. If you see this error:

1. You may have already used the link
2. Request a new magic link if needed

Wrong Email

If you entered the wrong email:

1. Close the waiting screen
2. Start the login process again
3. Enter the correct email

Email Changes

Changing Your Email

If you need to change your email address:

1. Sign in with your current email
2. Go to Settings → Account
3. Tap "Change Email"
4. Enter new email address
5. Verify new email with a magic link
6. Your account is now tied to the new email

What Happens

When you change emails:

• A verification link goes to the new email
• You must verify to complete the change
• Future logins use the new email
• Old email no longer works for login

Multiple Devices

Signing In on Another Device

To use Curl Budget on a new device:

1. Download the app
2. Enter your email
3. Receive and click magic link
4. You're signed in on the new device

Managing Sessions

Each device has its own session:

• Sign out on one device doesn't affect others
• You can be signed in on multiple devices
• Data syncs across all your devices

Security Considerations

Protect Your Email

Since your email is your login:

• Keep your email account secure
• Use strong email passwords
• Enable 2FA on your email
• Be cautious of email phishing

If someone accesses your email, they could access your Curl Budget.

Shared Devices

On shared computers:

• Always sign out when done
• Don't check "Stay signed in" if offered
• Clear browser cookies if concerned

Lost Device

If you lose a device:

1. Sign in on another device
2. The lost device remains signed in unless you sign out
3. Consider changing your email if the device is compromised

Related Features

• Creating Your Account - Initial account setup
• First Steps - After signing in
• Privacy & Security - How we protect your data