Magic Link Authentication Guide
Magic Link is email-based passwordless authentication. OwnBlock sends a one-time link valid for 15 minutes — clicking it signs you in. No GPG, no biometrics, no technical knowledge required.
1. What is Magic Link?
OwnBlock sends a one-time link to your email address. Clicking it automatically authenticates your session. There is no password to remember and no software to install.
- Simple: ideal for users who prefer simplicity over technical setup.
- No password: nothing to lose or leak.
- One-time link: each link expires after use or after 15 minutes, whichever comes first.
Recommended for users who do not have a GPG key or WebAuthn device, or who prefer not to set one up.
2. Requirements
- A valid, accessible email address.
- Access to that email inbox.
- The link expires in 15 minutes — if you miss it, request a new one.
3. How to register
- Go to /login and select the Create account tab.
- Enter your alias.
- Select the Magic Link (email) method.
- Enter your email address.
- Check your inbox and click the link. A new tab will open briefly to authenticate you and close automatically — this tab will take you to your account.
- On successful registration, 5 recovery codes appear — save them immediately.
4. How to sign in
- Go to /login.
- Enter your alias.
- Select the Magic Link (email) method.
- Enter your email and click Send link.
- Check your inbox and click the link. A new tab will open briefly to authenticate you and close automatically — this tab will take you to your account.
5. Security considerations
Magic Link security depends directly on the security of your email account.
- Enable 2FA on your email: if your email account is compromised, so is your OwnBlock access. It is strongly recommended to enable two-factor authentication at your email provider.
- One-time link: once you click the link it is consumed — it cannot be reused.
- 15-minute expiry: links expire regardless of whether they have been used.
- Do not share the link: anyone who has the link can authenticate as you.
6. Adding Other Authentication Methods
From Settings you can add a passkey (WebAuthn) or GPG key to your account. Diversifying authentication methods reduces dependency on email availability and improves overall security.
If you add a passkey, you can sign in even if your email is not available.
7. Recovery codes
When you create an account with Magic Link, OwnBlock automatically generates 5 recovery codes. These codes are shown only once at account creation and cannot be retrieved afterwards.
Each code has the format: AAAAAAAA-BBBBBBBB-CCCCCCCC-DDDDDDDD (4 groups of 8 characters).
Use case: if you no longer have access to the email address linked to your account, recovery codes are the only way to regain access.
After using a recovery code, go to Settings and generate a new set of 5 codes.
Without access to the email address AND without recovery codes, the account is permanently and irrecoverably inaccessible. Store the recovery codes in a safe, offline location at account creation time.
8. Account lifecycle
OwnBlock accounts are automatically deleted after 7 days of inactivity. The 7-day counter resets with every successful sign-in — it only affects users who do not sign in for 7 consecutive days.
Why this policy exists: OwnBlock accounts exist exclusively to (1) create hashrate rental orders, (2) manage Telegram notification preferences, and (3) access the support ticket service. There is no social profile, no saved payment method, no history beyond active orders. An inactive account means the user is simply not using any of these services — keeping it would only consume resources without purpose.
Practical implication: if you return to the platform after more than 7 days without logging in, you will need to create a new account with the same or a new email address, and choose a new alias.