How are magic links secured?

Magic links use JWT (JSON Web Tokens) signed with a secret key:

  • Each token contains the patient ID, appointment ID, form IDs, and organization ID
  • Tokens expire after 7 days
  • No login or account creation required for patients
  • Tokens are single-use for appointment-based intake

Get every patient ready before the visit.

Start with Intake, then add booking, reminders, and payments when you need them.

Cancel anytime · BAA included