If you can assume that your users will most likely use the same computer, you can make this technique slightly more secure. Have the random link only log you i

If you can assume that your users will most likely use the same computer, you can make this technique slightly more secure. Have the random link only log you in if the device is recognized as one that has logged in with a password before. Combine this with two levels of "logged in-ness" and you have a pretty robust, easy to use system.