Why we chose passwordless login for Green Dot accounts
On day one of GreenDotPlay we had a choice: build a classic email-plus-password form, or ship magic-link sign-in and see what happens. We shipped magic links. Two years later, here is what actually happened.
The support-ticket load fell by 82 percent
Compared to a benchmark from a friend's small SaaS running a classic password form, our sign-in-related support tickets are 82 percent lower per active account. The remaining 18 percent are almost all "the email is caught by our corporate spam filter". Zero "I forgot my password" tickets, because there is no password to forget.
Signup-to-play time is under 30 seconds
From landing on /login to clicking the first cell of your first Green Dot board: 27 seconds median. That includes waiting for the magic-link email, opening it, and clicking through. Classic password signup benchmarks around 90–150 seconds — most of it wasted on "confirm your password" and "we sent a verification email anyway".
Compromise rate is near zero
Since launch we have seen four confirmed account-compromise reports, and every one traced back to a shared mailbox where someone else had access. Zero credential-stuffing attempts have worked, because there are no credentials to stuff. Zero database-leak risk on our side, because we do not store password hashes.
What was harder than expected
Corporate mail systems that scan every URL by opening it in a sandbox — the sandbox click consumes the single-use token. We had to write a small piece of copy that tells the player to copy the URL instead of clicking, and we now silently issue a second token when we detect a scanner user-agent within one second of the first click.
Also harder than expected: convincing new signups that yes, this really is how you sign in, no there is no password to set, no it is not a trial. We added a "no password required — this is normal" line under the email field. Signup completion went from 71 to 88 percent.