Magic Link Not Working / Already Expired
You requested a magic link, clicked it right away, and the app says it's already expired. Frustrating - and almost always not your fault.
This is a known issue with corporate email security tools. Here's what's happening and how to fix it.
Table of Contents
Why This Happens
Magic links are one-time tokens. They work exactly once, then they're done.
If your inbox is protected by a corporate security gateway (Microsoft Defender Safe Links, Mimecast, Proofpoint, Barracuda, etc.), the gateway automatically clicks every link in incoming emails to scan it for malware before delivering the email to you.
By the time the email lands in your inbox, the magic link's one-time token has already been used by the scanner. When you click it, Supabase says: "this link has already been used" → Email link is invalid or has expired.
You can usually spot this in Outlook with a banner like:
CAUTION: This email originated from outside [Your Company]. This message...
Quick Fixes
Pick the option that fits your situation.
1. Ask IT to Whitelist Our Domain (Recommended for Work Email)
If you need to use your work email, ask your IT team to whitelist autoprint.email from link scanning / Safe Links rewriting. This is a common request and most IT teams can do it in a few minutes. This is the proven fix - most customers in your situation resolve it this way.
2. Sign in with Google
On the sign-in screen, click Continue with Google instead of using the email/magic link option. This skips the email step entirely - no token to scan, no expiration. Works only if your account is tied to a Google identity.
3. Use a Personal Email
If you don't need your work email tied to the account, sign up with a personal Gmail or Outlook.com address. Personal email providers don't pre-scan links the same way.
How to Confirm It's Your Email Gateway
A few signs:
- The link is "expired" the moment it arrives - even if you click within seconds
- Multiple new magic links all fail the same way
- Your work email shows a "CAUTION: external sender" banner
- You're on Microsoft 365, Google Workspace with extra security, or any corporate Outlook setup
If you sign up with a personal Gmail and it works instantly, that confirms the gateway was the culprit.
Still Stuck?
If none of the above works, contact support and include:
- Your email provider (work Outlook, Gmail, etc.)
- Whether you tried Google sign-in
- Your app logs (instructions in the support guide)
We'll help you sort it out.