# Knock: Major incident: Knock dashboard login magic links are unavailable

**Summary:** _summary pending_
- Kind: Major incident · Label: major (vendor)
- Changed: 2026-09-21 18:22 UTC · Detected: 2026-10-19 18:33 UTC
- [Source: https://status.knock.app/incidents/01M32K8NNJK375CEA9N0SKE816](https://status.knock.app/incidents/01M32K8NNJK375CEA9N0SKE816)
- [Company: Knock](https://rewindex.com/company/knock.md)
- Versions: before (none: first archived) → after incident\_version:740/01M32K8NNJK375CEA9N0SKE816@c34a3a295e60
- Change 1 of 1 for this incident

Incident page (full timeline): [Knock dashboard login magic links are unavailable](https://rewindex.com/company/knock/incidents/01M32K8NNJK375CEA9N0SKE816.md)
## What changed

**1. Added: Title**

```diff
+ Knock dashboard login magic links are unavailable
```

**2. Added: Impact**

```diff
+ major
```

**3. Added: Status**

```diff
+ resolved
```

**4. Added: Start time**

```diff
+ 2026-09-21 18:22 UTC
```

**5. Added: Resolved time**

```diff
+ 2026-09-21 19:24 UTC
```

**6. Added: Update** (investigating) · 2026-09-21 18:22 UTC

```diff
+ We're currently investigating an issue with dashboard login via magic link. Sign-in via google and passkey are not impacted. Message sending via API is not affected.
```

**7. Added: Update** (monitoring) · 2026-09-21 18:41 UTC

```diff
+ A fix has been implemented, and we're currently monitoring the service.
```

**8. Added: Update** (resolved) · 2026-09-21 19:24 UTC

```diff
+ This incident is resolved, and magic link login is fully functional. Malicious activity caused our email provider to flag the Knock dashboard's transactional emails, disrupting magic link deliverability. We've blocked the activity and restored email delivery. Only Knock's emails from hello@notify.knock.app were impacted. Customer email channels were unaffected.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-09-21 18:22 UTC | Major incident: Knock dashboard login magic links are unavailable (this change) | major |

All Knock changes: [timeline](https://rewindex.com/company/knock/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._


---
Canonical: https://rewindex.com/change/ie14f01b22edca6 · Markdown: https://rewindex.com/change/ie14f01b22edca6.md · JSON: https://rewindex.com/api/v1/changes/ie14f01b22edca6 · Generated 2026-10-20T00:00:58.794Z