<story><title>Are Magic Links Outdated?</title><url>https://zitadel.com/blog/magic-links</url></story><parent_chain><item><author>robrobrobrob</author><text>MagicLinks are a mobile nightmare. Mobile email clients use their own browser and cookie jar which consume the session cookie you&amp;#x27;re trying to put into the user&amp;#x27;s main browser. This results in users &amp;#x27;never staying signed in&amp;#x27; and a lot of frustration.&lt;p&gt;Sending a one-time code via email fixes this, and is in practice about as easy to use as a link on desktop.&lt;p&gt;In our app (Loomio) we default to magic&amp;#x2F;codes, but let users use passwords if they prefer.</text></item></parent_chain><comment><author>andybak</author><text>&amp;gt; MagicLinks are a mobile nightmare. Mobile email clients use their own browser and cookie jar which consume the session cookie you&amp;#x27;re trying to put into the user&amp;#x27;s main browser.&lt;p&gt;It might be howling into the void but the conclusion I reach from this is that &amp;quot;Mobile email clients are a nightmare&amp;quot;.&lt;p&gt;Generally speaking, embedded browsers in mobile apps are a terrible idea and break user expectations in multiple ways.</text></comment>
<story><title>Are Magic Links Outdated?</title><url>https://zitadel.com/blog/magic-links</url></story><parent_chain><item><author>robrobrobrob</author><text>MagicLinks are a mobile nightmare. Mobile email clients use their own browser and cookie jar which consume the session cookie you&amp;#x27;re trying to put into the user&amp;#x27;s main browser. This results in users &amp;#x27;never staying signed in&amp;#x27; and a lot of frustration.&lt;p&gt;Sending a one-time code via email fixes this, and is in practice about as easy to use as a link on desktop.&lt;p&gt;In our app (Loomio) we default to magic&amp;#x2F;codes, but let users use passwords if they prefer.</text></item></parent_chain><comment><author>Joker_vD</author><text>It&amp;#x27;s actually pretty insane: there is a setting on Android to always use the main browser (Chrome) to open links, I&amp;#x27;ve turned it on, and yet the Gmail app &lt;i&gt;still&lt;/i&gt; opens the links in the embedded Chrome browser — which has different cookies, different history that apparently is not synced with my other Chromes, and even looks sli-i-ightly different than &amp;quot;normal&amp;quot; Chrome, somehow.&lt;p&gt;I&amp;#x27;ve no idea why it is so difficult for apps to open links in the user-selected browser. Isn&amp;#x27;t it just &amp;quot;xdg-open &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;example.com&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;example.com&amp;#x2F;&lt;/a&gt;&amp;quot;?</text></comment>