Magic

Name: Magic
Rating: 5.0 (1 reviews)

Make passwords disappear with a touch of Magic

5.0•1 review•

153 followers

Make passwords disappear with a touch of Magic

5.0•1 review•

153 followers

Visit website

Authentication & identity tools

Passwords are the bane of app security. With a few lines of code and no bloat, Magic lets you build apps with blazing-fast, customizable, passwordless login - with future-proof crypto and identity tech under the hood.

Launch tags:API•User Experience•Privacy

Launch Team

Framer AI AgentsDesign and publish professional sites with AI

Promoted

This is so relevant. Great job! Love it. One question: how much does/will it cost? Couldn't find it on website.

Report

6yr ago

Magic

Maker

@sergey_lukin Thanks so much Sergey! Pricing page is coming very soon! We'll be charging a base fee a fixed charge per active user per month. We'll be carrying over the pricing from our existing key management product (https://fortmatic.com/pricing) and make slight adjustments. Love to hear your feedback on the price range as we are trying to make this an optimal choice for startups and growing companies too!

Report

6yr ago

Great work! We've integrated Magic into TokenSets already, and it makes getting started w/ new users a breeze.

Report

6yr ago

Magic

Maker

@felice_feng Thanks Felice! Super excited for what's next to come and bringing decentralized finance to the mainstream 🔥🔥🔥

Report

6yr ago

Memo

@felice_feng Do you have a link to TokenSets, I'm really curious to see how more people are using magic links in their sites

Report

6yr ago

Jasper

@_seanli I was very impressed when I signed up on my laptop and when I clicked the email link on my phone I was instantly signed into the dashboard on my laptop.... BUT then I opened a new window and signed up with my coworkers email who is currently across town and he clicked the email and I was instantly signed in to HIS account. This seems very insecure. This is why providers like Auth0 require magic links to be opened in the same browser session to be valid. Maybe I missing something here? Besides this seemingly big security flaw I am very impressed with the simplicity and execution. Love the brand and great documentation. Way to go 🙌

Report

6yr ago

Magic

Maker

@jpamorgan Thanks so much for the help testing and the feedback John! We're aware of the potential phishing risks like you described, and will be releasing the feature to detect where and how the user has opened the magic link in order to prevent users from accidentally clicking on a malicious login attempt! There's only so much that can be done in terms of email security. In the future, through progressive disclosure, we'll be gradually introducing users to more sophisticated form-factors of login we are working on like WebAuthn / mobile authenticator apps.

Report

6yr ago

This is a good idea, but i have a question, for the mail recipient, there are often all kinks of problems, such as mail delay, mail is thrown into trash box, mail is rejected and other risks, how to ensure that users can access the system?

Report

6yr ago

Magic

Maker

@haolee Email links are just the easy starting point for many users. We will be graduating more users to more sophisticated login methods such as webauthn and mobile authenticator apps. The benefit with our DID architecture is that developers can easily add other form-factors of login without having to change the backend code!

Report

6yr ago

@_seanli Thank you so much

Report

6yr ago

How is this different from standard 2 factor auth? Also, how does Magic protect against compromised emails?

Report

6yr ago

Magic

Maker

@vineet_goel1 good question! We start with magic link emails since it's the easiest way to get users started even though it may be susceptible to compromised emails (good thing most email providers have better protection mechanisms now). In the near future we will have other hardware/device login which can be added by users for added security and recoverability! Progressive disclosure is key for Magic, ease users in with magic links, and then graduate them into more advanced ways to login later. The other unique aspect with Magic is that we use decentralized identity (DID), developers only need to deal with DID tokens signed by keys on the backend resource server, and the front-end key management form-factor can be very flexible (magic links, mobile authenticator, webauthn etc.) without having to change the backend code!

Report

6yr ago

GitHub Reader

@_seanli Great product. I was lucky to have the glimpse of this during ETHDenver :) I have a basic doubt here - Consider a case where someone stole my device and somehow managed to get the device password. Now that person will be able to get into the app via clicking on the magic link from the email client. How do you take care of the security in this case?

Report

6yr ago

Magic

Maker

@meakaakka Thanks Akash! Magic link relies on the users' security of their email. It's a good place to help users get started, the goal here is progressive disclosure, eventually graduate users towards more sophisticated device based login via WebAuthn / our own mobile authenticator app

Report

6yr ago

GitHub Reader

@_seanli got it. The challenge here is to let users get familiar with the magic link flow. And I think a mobile authenticator app would surely fix this security issue.

Report

6yr ago

This is amazing and looks pretty simple to integrate. I will give this a try. Is there any other way to send links other than emails? What other applications can this be extended to other than logins? Great Job!

Report

6yr ago

Magic

Maker

@soham_g Thanks so much! We are working on WebAuthn and mobile authenticator app for one-click login first, then we may explore other ones like phone number.

Report

6yr ago

1 2 3

•••

5.0

Based on 1 review

Review Magic?

Magic is praised for its seamless integration and ease of use, making it a versatile solution for various business needs. Users appreciate its tailored functionalities, which allow for high personalization across industries. The passwordless login feature is highlighted for its speed and customization, enhancing user experience. Additionally, Magic's pricing model is considered favorable, especially for startups. Overall, it is well-received for its ability to simplify app security without compromising on performance or future-proofing.

Summarized with AI

Reviews

Most Informative