I recently built a login where the user types in their email and it sends them a login link whether they’ve ever logged in before or not.

Link expires in 10 minutes and cannot be used more than once.