Magic Links
Magic Link Security & Privacy
Magic links are designed so that security is built into the link itself — not dependent on a password or account login. Here is exactly how each security property works:
Unique secure token — Each link contains a unique, randomly-generated token. Links cannot be guessed or predicted.
Student-specific — The token is tied to one specific student. If someone else clicks Student A's link, they see Student A's homework — they cannot change whose submission it is recorded under.
Homework-specific — Each link is valid only for the homework pack it was created for. A link from last week's homework cannot be used to access this week's.
No personal data in the URL — The URL itself contains only the token — no student name, email, class, or school in the address bar.
Single-use after submission — Once a student submits, the link transitions to a read-only results view. The student can revisit to review their answers but cannot resubmit.
Best practice: Share magic links only with the intended student or their parent. The link is the only key needed to access and submit that student's homework.