From 38b8fd584a5b18068044b5e421d8a71619891c26 Mon Sep 17 00:00:00 2001
From: Daniel <danitex@danvics.com>
Date: Sat, 12 Sep 2026 23:34:14 +0200
Subject: [PATCH] fix: the sign-in code email no longer mentions the password
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

"Your password still works as usual" is not reassurance for everyone who
gets this mail. An account created through an invite has no password at
all, and one signing in with a code may never use theirs — for them the
sentence raises a question rather than settling one.

What the paragraph is for is saying that ignoring the mail is safe, and
it says that without the second sentence.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Dv6sqaY6Vq3ChZHMem3cnU
---
 src/utils/loginCodes.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/utils/loginCodes.js b/src/utils/loginCodes.js
index 02b11572..e7b598d2 100644
--- a/src/utils/loginCodes.js
+++ b/src/utils/loginCodes.js
@@ -103,7 +103,7 @@ function emailBody(code, appName) {
     '<p style="font-size:28px;font-weight:700;letter-spacing:4px;margin:16px 0;">' + code + '</p>' +
     '<p>It expires in ' + TTL_MINUTES + ' minutes and can be used once.</p>' +
     '<p style="color:#6b7280;font-size:13px;">If you did not ask to sign in, ignore this message ' +
-    'and nothing will happen. Your password still works as usual.</p>';
+    'and nothing will happen.</p>';
 }
 
 module.exports = { issue, consume, sweep, generate, normalise, emailBody,