Skip to content
HookWatch beta
FeaturesUse casesPricingQuickstartSecurityCompare
Resources
Resources overviewGuidesIntegrationsComparisonsChangelogDocumentationMCP server
Sign in Start beta
Changelog v1.13.0 New Security

Magic-link sign-in with step-up 2FA

Passwordless sign-in by magic link, with a step-up two-factor gate applied to every passwordless flow.

Published 1 min read
On this page

This release adds passwordless sign-in without weakening the second factor. Signing in by magic link is convenient; letting a link alone bypass 2FA is not, so it doesn’t.

Added

  • Magic-link sign-in — request a one-time link by email and sign in without a password. The link is single-use and time-bound.
  • Step-up 2FA — every passwordless flow is gated by a step-up two-factor check, so a magic link proves you control the inbox but still requires your second factor to complete sign-in. A member with 2FA enabled is never signed in by email alone.

Notes

Release date comes from the v1.13.0 git tag (14 July 2026). See the security overview for how authentication is handled.

Related resources

Changelog v1.17.0 MCP server and HTTP API docs The whole workspace API is exposed as roughly 48 MCP tools for AI assistants, alongside new public documentation for the HTTP API and MCP. 1 min read Changelog v1.18.0 Workspace SSO and inactivity timeout Single sign-on through your own SAML 2.0 or OIDC identity provider, with an optional Require SSO enforcement and a session inactivity timeout. 1 min read Changelog v1.19.0 Overage pricing on metered usage Paid plans can now run past their included usage with metered overage, with projected charges surfaced in billing settings before they land. 1 min read
Get started

See what happened to every webhook.

HookWatch keeps the request, the response, and every attempt for each delivery — so the debugging, retry, and replay steps in this article are a matter of reading, not reconstructing.

Start using HookWatch Read the documentation