Documentation › Account and administration › Account and sign-in

Account and sign-in

Magic-link sign-in, sessions and API keys.

# Magic link

There is no password to remember. Type your e-mail address at Sign in: you receive a one-time link that signs you in. The link works once and expires quickly.

# Session

Once signed in, your browser stays signed in for 30 days. Sign out ends it at once.

# Your console

The console lists your links and portals, with their panels, statistics and the options described in these pages.

Tabs are grouped: Create & track (links, content QR codes) and Templates (portals, QR styles). Your profile is the round button at the top right: it opens My account, the documentation and Sign out. You can add a picture there (under My account); it is a small square image only you see, and without one the button shows your initials.

# API keys

Create keys to manage your links from your own tools. A key is shown once when it is created: copy it then. Your plan sets how many keys you can hold.

# Webhook

In My account, give an https address and FlashLink sends it a message each time something happens to one of your links: created, changed, deleted, restored, shared, or a click spike (link.created, link.updated, link.deleted, link.restored, link.shared, link.spike). Perfect to feed Zapier, Make, a spreadsheet or your own tool.

• The message is JSON: { "event", "at", "data": { "code", "detail" } }.
• Each message is signed. The header X-FlashLink-Signature: t=<time>,v1=<signature> holds an HMAC-SHA256 of <time>.<body> made with your secret, shown once when you save the address. Recompute it on your side to be sure the message comes from FlashLink.
• Send a test checks that your address answers. Messages are sent once, without retry; the address must be public (no local address).

# Your data

What is kept and why is described in the privacy page and the terms.