Signing in with a magic link: how colleagues get access without a password
A PassTransfer Pro workspace can be closed to outsiders, so only colleagues can send passwords under your branding. The moment a workspace is closed, the obvious question follows: how do those colleagues sign in, without everyone sharing the owner's password?
The answer is a magic link: a one-time sign-in link emailed to an address on a verified company domain.
Why not just one shared password
A single account with one team-wide password looks like the fastest fix, but recreates exactly the problem PassTransfer exists to solve: a credential passed around over Slack, WhatsApp or a sticky note, never rotated when someone leaves, with no way to say who ever had it. A shared password for the workspace itself would just move the problem, not solve it.
How the magic link works
- A colleague signs in to the workspace with their email address.
- If that address is on a domain the owner has verified (say,
@youragency.com), PassTransfer emails a link to it. - The link works exactly once and expires after a limited time.
- Opening and confirming it signs the colleague in, without ever typing a password.
The workspace owner stays off this path: they sign in with their own password, as always. A mailbox several people read (info@, support@) must never become the key to the settings, which is why a link mailed to such an address never grants access to branding, cancellation or the data export — those stay with the owner.
Why it takes two requests, not one
Corporate mail is often scanned by security software that opens links in incoming mail itself, to check they're safe. If simply opening the link were enough to sign in, that scan would burn the one-time link before the actual recipient ever got to it. That's why the link first shows a confirmation screen; only a deliberate click after that consumes it. One extra click for the recipient, but it keeps a mail filter from locking your colleagues out.
What this buys you
No password management for the team. Nobody has to remember, reset or share a password to get into the workspace.
Access that limits itself to your own domain. Only addresses on a domain you've verified yourself can request a link. A former colleague on a personal address can't get in, even if they find the sign-in screen.
Sessions you can revoke yourself. Cutting off someone who's leaving is one click in settings; the next link they try (which then no longer works, since the domain stays verified for whoever still works there, not for whoever left).
What it isn't
This is not access control over what's ever been sent from the workspace: PassTransfer keeps no send history, magic link or not. It only governs who may generate a link under your brand. Anyone without access at all can still just send a password through the free, public version at passtransfer.com; a closed workspace stops someone doing that under your name, not from doing it at all.
Conclusion
A magic link replaces the shared password with something that can't leak, be forgotten or be reused: an address on a domain you've verified yourself. For teams that want a closed workspace without the overhead of team accounts, this is how you hand colleagues access that leaves as easily as it arrived.
