Hi everyone! I've been looking into Auth0 for a new client project, and I'm a bit stuck on the concept of "passwordless."
From what I can tell, a lot of tutorials and even some default setups just use a "magic link" emailed to the user. That's basically just a link they click to log in, right? But I keep reading that this isn't considered a true passwordless *flow*.
My goal is to implement something smoother, maybe where a user enters their email and gets a one-time code (like a 6-digit number) sent to them, either by email or SMS. Or even using biometrics later on. Something that feels more immediate and secure than just clicking a link in an email.
I'm using the Auth0 dashboard and their standard login widget, but I feel a bit overwhelmed by the options. Could someone explain, in simpler terms:
* What exactly makes a "proper" passwordless flow different from just a magic link?
* Is the one-time code option actually more secure, or is it just about user experience?
* If I want to set up the one-time code via email (to start), what are the main steps in Auth0? Do I need to change things in the Universal Login, or is it mostly about configuring the Passwordless Connection?
I'm coming from a Shopify/email marketing background where things are a bit more... pre-packaged. So any guidance on the core concepts and the first practical steps would be a huge help 😅. I think a lot of us starting out get confused by this.