Articles on: Getting started

Magic links explained

A magic link is a unique URL, sent to your email, that logs you in with a single click. No password. No signup. No friction.


This is how Katalyz handles member authentication — signing in to your workspace at app.katalyz.co. Buyers opening a room never sign in this way: they enter their email on the room's login page and, on rooms set to Access code verification, a 6-digit access code emailed to them.



  1. You enter your email address on the Katalyz login page.
  2. Katalyz sends you a one-time email with a link.
  3. You click the link.
  4. You're in.


The link is:

  • Unique to you — tied to your email, not shareable
  • One-time-use — once clicked, it can't be re-used
  • Short-lived — expires after 48 hours


Why no passwords?


Two reasons: security and your buyer's experience.


Security:

  • No password to guess, phish, or reuse across breaches
  • No password to forget or reset
  • Losing access to your email is the only credential-loss scenario (and if that happens, password reset wouldn't save you either)


Buyer experience:
When your prospects receive a Katalyz room, they access it the same way — one click, no signup. This zero-friction experience is a core reason Katalyz rooms get opened and read, rather than ignored like yet another portal invitation.


The tracking benefit


Because every entry point is tied to one email — a magic link for members, the email a buyer types on the room login page — Katalyz knows exactly which person is there. That means:


  • Activity is tracked per-visitor (who opened, when, for how long, which sections)
  • You can tell your champion from their CFO in the analytics
  • Comments and signatures are correctly attributed


If two people share the same magic link, Katalyz treats it as the first person — so don't forward your magic link. If you need to give access to someone else, invite them directly so they get their own link.


How room access settings identify a buyer


Rooms don't use magic links — they identify the visitor from the email they type on the room's login page:


  • Only authorized users — the email entered has to match the room's list of authorized emails and/or domains. Each invited person can also be sent a personal invitation link that takes them straight in.
  • Access code verification — after the email, a second screen ("Check your inbox.") asks for a 6-digit access code emailed to that address. See Access code verification — step by step.


What if I lose access to my email?


Contact your admin — they can update your email in Settings → Members. If you're an Admin and lose email access, email contact@katalyz.co.


Updated on: 01/10/2026

Was this article helpful?

Share your feedback

Cancel

Thank you!