Login flow sends magic link but calls it a "verification code" — breaks cross-device login

Status Open
Maintainer reply None cached
Activity 0 comments · opened Sep 10, 2026

Summary

When logging in, the UI says it will send a "verification code", but the email that arrives contains a magic login link instead. This breaks the common case where I'm signing in on one device (e.g. laptop) but my email is on another device (e.g. phone) — the link opens a session on the wrong device. This also happens when I am using 2 different browsers on the same machine.

Expected

Either:

  • Send a short numeric/alphanumeric code I can type into the device I'm actually signing in on, or
  • Include both a code and a link in the email, and update the UI copy to match.

Actual

Email contains only a clickable link. UI copy mislabels it as a "verification code."

Impact

Anyone whose email lives on a different device than the one they're logging in on gets stuck.

View original on GitHub ↗