Miro now supports authentication via Magic Link. Instead of signing in with an email and password combination, users can now simply enter their email to receive a Magic Link to their email inbox. Clicking on this link takes the user to a confirmation screen, where clicking Continue signs them into Miro. This functionality provides a number of enhancements to your users’ security, including:
- Lessened burden on users to remember complex passwords
- Eliminated reuse of passwords (users essentially get a new password each time)
- Reduced risk of credential stuffing and phishing attacks
- Single-use login link: the link expires after use
Sign in with a one-time code
The sign-in email can also include a 6-digit code. Users can either click the link, or enter the code on the device where they started signing in. This makes it easier to sign in on one device while reading email on another. For example, a user can start signing in on an interactive display or a shared computer, open the email on their phone, and type the code on the display.
Each email works only once: after a user signs in with its link or its code, both stop working. Links and codes expire after 24 hours, and several incorrect code attempts invalidate both. In the Microsoft Teams app, the Microsoft Store version of the desktop app, Live Embed, and on interactive displays, Miro sends only a one-time code.
If users have trouble signing in, see I can't log in.