WHAT IS PASSWORDLESS LOGIN?
Tired of candidates dropping out because they have forgotten their login details? Passwordless Login provides a seamless, secure way for applicants to access their accounts via a "magic link", removing the need to remember complex passwords while maintaining high security standards.
WHAT DOES IT DO?
-
Slash Candidate Drop-Off: Capture talent the moment they are interested, even if they can’t remember the password they made three months ago.
-
Reduce Support Headaches: Dramatically lower the volume of "I can't log in" tickets hitting your helpdesk.
-
Mobile-First Design: Perfect for the modern candidate who manages their career from their smartphone.
-
Security Without the Stress: If you use 2FA, this replaces the need for a separate code, streamlining the entry process while staying protected.
HOW DOES IT WORK?
-
From the login page, the candidate selects the option to log in with a one-time link and enters their registered email address.
-
The system generates a unique authentication link and sends it via the organisation's chosen method (email or SMS).
-
The candidate clicks the link in the message, which directs them to a "Login Now" button within the application centre.
-
Upon clicking "Login Now", the candidate is immediately authenticated and can manage applications, book interviews, or update their profile as normal.
This is one-time use, so once the button is clicked, the link no longer works. The links also expire if not used for a certain amount of time, which can be configured based on needs.
To prevent "phishing" or account probing, the system does not provide feedback if an entered email does not exist.
CONSIDERATIONS
-
Method Selection: You must choose between Email or SMS at the system level; this cannot be toggled by the candidate.
-
SMS Requirements: If opting for SMS, ensure that you have SMS messaging enabled and your application forms mandate a mobile number field. Candidates using SMS links are likely to continue their journey on a mobile device, so ensure your process is mobile-optimised.
-
Other Security Solutions: If Two-Factor Authentication (2FA) is enabled, Passwordless Login will take priority. The candidate will receive the login link instead of being prompted for a 2FA code.
-
Link Expiry: We recommend having the link expire after 15 minutes. However this can be configured to a different duration to meet your specific security policies. Consider what length of time will work for your needs.
-
Candidate Support: Ensure that your support material including online guidance, FAQs, chatbots, support teams are equipped to help candidates logging in via this method.
NEXT STEPS
Consider whether you want to use email or SMS as your primary delivery method and confirm your desired link expiry duration.
If you’re not a Self-Configuration User, you should consider the wording for the emails or SMS messaged. If you are a Self-Configuration User, you’ll be able to amend these yourself.
Speak to your Customer Success or Commercial Manager for any additional information.
COSTS
This feature is free of charge.
ADDITIONAL INFORMATION
For other candidate security features, consider email verification and two-factor authentication. You can find information on these and our other login security solutions below.
