Short expiry reduces the chance of anyone else using the link and ensures each login is a fresh, verified request. If it expires, simply request a new one—there’s no need to reset or remember anything. (We also rate-limit requests to protect your account from abuse.)