FlowDiagram
Flowcharts & processMermaid

Password-less login decision flow template

How an app chooses between passkeys, magic links and one-time codes at sign-in, with fallbacks and step-up checks — for product and identity engineers. This flowchart template contains 18 labelled steps, 8 decision points, branches such as “No”, “Yes”, “Email”.

Open in the editor →
  • Free — no account, no trial, no watermark
  • Fully editable shapes and connectors, not a screenshot
  • Export PNG, SVG or PDF, or share it as a link
  • Private: the diagram never leaves your browser

Steps in this flowchart

  • User enters email
  • Account exists?
  • Offer sign-up
  • Passkey registered on this device?
  • WebAuthn challenge
  • Biometric or PIN verified?
  • Choose fallback method
  • Send magic link, 15 min expiry
  • Send SMS one-time code
  • Link opened in time?
  • Code correct?
  • Too many attempts?
  • Temporary lockout
  • Risk signals: new device or location?
  • Step-up verification
  • Issue session token
  • Prompt to create a passkey
  • Signed in

How to use this flowchart template

  1. Click Open in the editor. The flowchart opens on a new page in FlowDiagram — nothing is uploaded and there is no sign-up.
  2. Rename, add or delete shapes and drag them where you want; connectors stay attached as things move.
  3. Drop in vendor logos from the library — 1,160 of them, including every AWS, Azure and Google Cloud service icon — or restyle it with the colour and theme controls.
  4. Prefer text? Edit the Mermaid source below and paste it in through ☰ → Import diagram (see the Mermaid editor); it imports as an editable diagram.
  5. Export to PNG, SVG or PDF, or press Ctrl+L for a link that carries the whole diagram.

Mermaid source

The whole template is the text below. Paste it into FlowDiagram, keep it in Git next to the code it describes, or hand it to an AI assistant to extend.

flowchart TD
  START([User enters email]) --> LOOKUP{Account exists?}
  LOOKUP -->|No| SIGNUP[Offer sign-up]
  LOOKUP -->|Yes| PASSKEY{Passkey registered on this device?}
  PASSKEY -->|Yes| WEBAUTHN[WebAuthn challenge]
  WEBAUTHN --> BIO{Biometric or PIN verified?}
  PASSKEY -->|No| FALLBACK{Choose fallback method}
  BIO -->|No| FALLBACK
  FALLBACK -->|Email| MAGIC[Send magic link, 15 min expiry]
  FALLBACK -->|Phone| OTP[Send SMS one-time code]
  MAGIC --> CLICKED{Link opened in time?}
  OTP --> CODE{Code correct?}
  CLICKED -->|No| FALLBACK
  CODE -->|No| LIMIT{Too many attempts?}
  LIMIT -->|Yes| LOCK[Temporary lockout]
  LIMIT -->|No| OTP
  CLICKED -->|Yes| RISK{Risk signals: new device or location?}
  CODE -->|Yes| RISK
  BIO -->|Yes| RISK
  RISK -->|High| STEPUP[Step-up verification]
  RISK -->|Low| SESSION[Issue session token]
  STEPUP --> SESSION
  SESSION --> ENROL[Prompt to create a passkey]
  ENROL --> DONE([Signed in])

Related: AI flowchart generator · Mermaid editor · All flowcharts & process templates · All 521 templates