Email me a sign-in link
Works for new accounts and existing ones. We don't tell you which.
Check your inbox.
We sent a link to . The link expires in 15 minutes. If you don't see it, check spam — or send again.
🪶 The Free Navi auth promise
No password — there's nothing to leak or reuse on another site.
No Sign in with Google button — Google never sees you logging in.
No SMS 2FA — your phone carrier never sees an auth code from us.
TOTP for sensitive actions — scan a QR with your authenticator app once; from then on, anyone changing your email or deleting your account needs both your inbox AND your authenticator. Industry-standard RFC 6238. No server involved.
Auth scaffold lives in auth_api.py at the moment — magic link is gated on Resend being configured (your operator can flip it on without a code change).