Turalogin

Magic links as a service.
You keep the session.

We send the login email, secure the tokens, and verify the user. You make two API calls and create the session. No SMTP, token storage, or frontend SDK to build on your side.

This site runs on Turalogin itself

Powering auth at

NTQPerformance.comClaritrial.comLMKGPT.comLaborStatus.comBabyMonth.comTicketSlice.comSpeedwaySquares.comNTQPerformance.comClaritrial.comLMKGPT.comLaborStatus.comBabyMonth.comTicketSlice.comSpeedwaySquares.com

How it works

Three steps. Two endpoints. No redirects. No token leakage.

1

Your backend calls /auth/start with the user's email. Turalogin sends a login email from our trusted domain.

2

The user clicks the login link or enters the 6-digit code. Whichever is easier on their device.

3

Your backend calls /auth/verify server-side, gets the verified email back, and creates your own session.

Why Turalogin

Auth with a small attack surface. Simple to integrate, hard to get wrong.

No passwords to leak

Zero password database. No hashing, no storage, no credential stuffing.

Learn more

Backend-only security

Tokens never touch the browser. All verification happens server to server.

Learn more

Simpler than OAuth

No redirect dance. No consent screens. No token refresh logic to debug.

Learn more

Better than 2FA

Email providers already have 2FA. You inherit their security for free.

Learn more

Works with your stack

POST to start. POST to verify. If your stack can make HTTP requests, you're ready.

Next.js
Node.js
Bun/Deno
Python
Ruby
Java
Go
PHP
.NET
Serverless

Ready to stop building auth?

Sign up, grab your API key, and make your first call. Works on localhost immediately.

Free to start. No credit card required.