Can I Allow Magic Link Login Only From Approved Email Domains?

Quick Answer

Yes. Domain Restriction (PRO) lets you control which email domains can request a Magic Link. You keep an allowed list, a blocked list, or both, so only the right people can log in.

Where To Find It

Go to Settings → Security → Domain Restriction.

Allowed domains — only these domains can request a Magic Link. Everything else is refused.
Blocked domains — these domains are always refused, even if they would otherwise be allowed.

Enter one domain per entry, for example company.com or school.edu.

What This Looks Like For A User

If a user requests a link with an approved domain, they continue normally. If the domain is not approved (or is on the blocked list), the request is refused before any email is sent.

Why You Might Want This

Domain Restriction is helpful when your site is built for a specific group of people. It can help you:

Keep access private
Reduce spam login requests
Limit access to staff, members, or partners

Best Fit

Company portals
Employee dashboards
Private communities
Organization websites

Example

If company.com is on the allowed list, then alex@company.com can request a Magic Link, but alex@gmail.com cannot.