Client Portal Magic Links Now Fall Back to OTP
Expired Client Portal magic links no longer leave contacts at an error screen. When a contact opens an expired magic link, SMBcrm now redirects them to the OTP verification flow so they can regain access more easily.
What Changed
When an expired Client Portal magic link is opened, the contact is automatically taken to the OTP verification screen instead of needing to request or regenerate a new link.
An OTP is sent to the contact’s email address. For privacy, the email address is masked on the verification screen.
How It Works
- A contact clicks an expired Client Portal magic link.
- SMBcrm redirects the contact to the OTP verification screen.
- An OTP is sent to the contact’s email address.
- The contact enters the OTP to complete login and access their account.
No setup is required. The fallback is automatically enabled for Client Portal magic link authentication.
Why It Matters
Magic links expire for security reasons, but expired links can create friction for contacts trying to access the Client Portal. OTP fallback gives contacts a secure way to self-recover access without needing a new link from an admin.
Notes
- Applies to Client Portal magic links using auth-v2.
- Expired magic links automatically fall back to OTP-based authentication.
- Contact email addresses are masked on the OTP verification screen for privacy.
Need Help Applying This Update?
Want help turning this update into a working part of your CRM, marketing, or automation setup?
Get Started or schedule a demo and we’ll help you map the right next step.