News & Updates
Innovating every single day to help you attract, engage, and serve your members
Set time limits for magic links
March 11, 2025
Magic links are a great way to get people into their membership accounts quickly and easily, but they can be a risk if the link ends up in the wrong hands.
Now magic links are time-limited.
Key Enhancements
- 15 min time limit for magic link expiration
- 90 days limit for database deletion
- Rate limit for user generated magic link is 5-6
- User can request magic link for themselves till 90 days since they last logged in
- Secret token is encrypted so login information is secured
- It is backward compatible so old magic link will work as it is till user request new ones
Why it Matters:
The overall goal is to avoid security incidents related to the misuse of permanent magic links.
- Minimizing the window of time that an unauthorized user can use a link to gain access.
- Reduces the likelihood of link theft and replay attacks.
- Increases user trust by demonstrating a commitment to protecting their data.
- Enhances compliance with modern security standards and best practices.
Members now have more control over their community email notifications, with unsubscribe preferences limited to the specific community and notification type they choose to turn off. Other community and platform emails continue as normal, helping members avoid unwanted messages without accidentally opting out of relevant updates. They can also re-enable individual notifications at any time from their notification settings.
You can now generate images directly within workflows using the AI Image Generation action, with support for multiple AI models, custom prompts, templates, quality settings, and brand controls. This is a premium action, so each execution carries an additional charge that varies with the model, quality, size, and any Design Kit or Brand Voice you apply. Generated images are automatically saved to Media Storage, with an Image URL available for the actions that follow, making it possible to use them in emails, SMS, social posts, custom fields, or webhooks. Because images are stored at a public URL that anyone with the link can open without logging in, take care when prompts include customer data. This opens up more flexible ways to create personalized visuals as part of your automated workflows.
