When a user initiates a login via email, the magic link or OTP they are sent will expire after 20 minutes. If a user doesn’t manage to click the link or submit the OTP within that window, they can simply request another one by returning to the login page and inputting their email address again.