> Also, magic links need to be designed so that I can login on my PC, and click the link on my phone, and be logged in on the PC. No. If magic links only log

> Also, magic links need to be designed so that I can login on my PC, and click the link on my phone, and be logged in on the PC. No. If magic links only log you in on the device you click them on, they prevent a lot of phishing attacks. With a setup like that, there's literally no way to impersonate your website and steal user credentials. This comes at a cost of making logins on public computers less secure, and which of these is more important should be weighed on a service-by-service basis. A website for making presentations should obviously choose "more phishing and easier to use on public computers", a service for managing your employees' HR records should obviously choose the opposite.