Fix: Claude Magic Sign-In Link Expired Instantly

Why Do Claude Sign-In Links Expire Instantly?

Claude utilizes "magic links" (passwordless email authentication) to sign users into their accounts. When you enter your email address on the login screen, Anthropic emails you a unique, one-time-use URL.

For security reasons, these links are configured to expire after 15 minutes. However, many users experience a frustrating loop where the link is reported as expired the exact moment they click it. This is almost always caused by security tools operating within your email service provider.

Common culprits include: * Email Security Scanners (Safe Links): Corporate or high-security personal email servers (such as Microsoft Defender/Outlook Safe Links, Mimecast, or Barracuda) automatically click and test links in incoming emails to inspect them for malware. Because Claude's magic links are strictly single-use, the security bot's pre-verification click instantly invalidates the link before it ever reaches your inbox. * Browser Extension Interference: Antivirus or privacy extensions installed on your browser may pre-fetch or scan clicked links in the background, consuming the token before the page fully loads. * Time Sync Issues: If the clock on your computer or mobile device is out of sync with network time servers, the timestamp comparison in the security token will fail immediately.

---

Step-by-Step Fixes for Expired Login Links

1. Copy and Paste the URL Directly Instead of clicking the link in your email client—which triggers background scanning hooks—manually copy the raw URL. 1. Request a new login link from `claude.ai`. 2. Open your email inbox, find the mail, and locate the login button. 3. Right-click the button (or long-press on mobile) and select **Copy Link Address** or **Copy URL**. 4. Open your browser, open an Incognito/Private window, paste the copied link directly into the address bar, and press Enter.

2. Configure Email Security Filters If you are using a corporate email system (Outlook, Exchange, or a custom domain managed by a third-party security suite), you must exempt Anthropic's automated emails. 1. Ask your IT administrator to add `*.anthropic.com` and `*.claude.ai` to your email system's URL rewrite/Safe Links whitelist. 2. If using personal Outlook/Hotmail, look for options to disable "Safe Links" or "Advanced Threat Protection" under your account's security settings.

3. Sync Your System Clock If your local device time is even a couple of minutes off, Claude's server-side security checks will flag the link as expired. 1. On **Windows**: Go to **Settings** > **Time & Language** > **Date & time**. Click **Sync now** under the "Synchronize your clock" section. 2. On **macOS**: Open **System Settings** > **General** > **Date & Time**. Ensure "Set time and date automatically" is toggled on. 3. After syncing, request a fresh login link.

4. Switch to a Clean Web Browser Session Active browser caching or legacy cookie mismatches can trigger false expiry alerts. 1. Open your browser and clear your browsing data (cookies, site data, and cached images). 2. Alternatively, download a secondary browser you don't normally use (such as Firefox or Brave). 3. Request a login link, open the incoming email, and copy-paste the URL directly into that secondary browser.

---

When to Escalate

If you have tried copying the raw link into an Incognito window, verified your system time is accurate, and checked with your email administrator but are still locked out, the issue may point to an internal account database block.

Reach out to the independent Anthropic Support desk by visiting support.anthropic.com and clicking the support widget. Explain that your magic links are showing as expired even when pasted immediately into an Incognito window. They can inspect your account status to ensure it hasn't been temporarily restricted or flagged by their automated security system.