What is a magic link?
A magic link is a unique, hard-to-guess link sent to someone by email that gives access to a specific page or task without a password. It is often used for sign-in and for one-off actions such as approving a timesheet.
How magic links work
The link contains a long random token that the server recognises. Opening it proves the person has access to that email inbox, which is the same thing a password reset relies on. Good magic links are limited in scope, expire after a while and can be combined with a second check, such as a one-time code sent to the same email address before an important action is confirmed.
For people who use a system only occasionally, like a client contact who approves hours once a week, a magic link removes the biggest hurdle: creating and remembering yet another account.
Magic links in TimeTracking
TimeTracking sends client approvers a secure magic link for their hours. The link opens only the hours for that client, and the approver signs with a one-time code sent to their email. The token never leaks through the referrer header, and every approval is recorded in the audit log.
Related pages
Client approval
The client confirming the hours a worker spent at their site, before the hours are paid and invoiced.
Client approval
Clients approve hours through a secure magic link. No account, no password.
Audit trail
A chronological, unchangeable record of who created, changed or approved data, and when.
See pricing
Free for up to 5 users. Core from €1 per user per month, everything included.
Try TimeTracking free
Free for up to 5 users. Core from €1 per user per month, everything included.