Magic links for customers

A simpler door for customers

Your customers aren't logging in all day, so Snowmass gives them an even lighter path than the 6-digit code: a magic link. They click a link in an email and land in their portal, already signed in.

How it works

• A magic link is sent by courriel when a customer is invited or asks to sign in.
• Clicking it signs them in — no code to copy, no password to set.
• The link is short-lived — it works for 30 minutes, then expires, so an old email in an inbox can't be reused later.

Built to be safe

• The link's token is stored only as a SHA-256 digest, never in plain form, so a leak of stored data doesn't expose working links.
• Redirects are safe-path only — a magic link can't be crafted to bounce a customer to an outside site.

When customers use it

Magic links are the front door for the customer portal — the dashboard, live event map and ETA, service-visit history, storm history, and notification preferences. Operators and staff sign in with the 6-digit code instead, since they use Snowmass throughout a shift.

If a customer's link has expired, they simply request a fresh one from the sign-in page.