Emailed magic links can be a great way to deal with authentication but please don’t make them single use, put a time limit on them instead. There’s one service I use which has single use tokens, which means that I’ll request a link, and then I can only use the service within the GMail app on my phone because any interaction with the link will cause it to be loaded.