
Email API
Password reset emails: token design and delivery checklist
Reset emails are a top account takeover vector. Design single-use, short-lived tokens, avoid account enumeration and make the email arrive fast.
4 min read

Reset emails are a top account takeover vector. Design single-use, short-lived tokens, avoid account enumeration and make the email arrive fast.
4 min read

Passwordless login lives or dies on email delivery. Compare magic links and one-time codes on security, link scanners, latency and cross-device use.
5 min read