Request One-Time Link

{# No SMTP-failure banner here by design (AF-7132): a distinct message on the send branch would be an email-enumeration oracle, since only real addresses reach the send path. SendMagicLinkView returns the same generic confirmation whether or not delivery succeeded; failures are logged server-side instead. #}

{# Honeypot (AF-28164): decoy field kept out of a human's view and the a11y/tab order. Real users leave it empty; naive bots that fill every field are rejected in MagicLinkRequestForm.clean_website. Hidden via off-screen positioning (not display:none, which some headless bots skip) plus aria-hidden + tabindex=-1. The label is a no-CSS fallback. #}

Leave this field empty

Email

Send Magic Link

Sign in with password instead