Actually, I see now that the former is not possible at all. Following up on this discussion: https://github.com/ory/kratos/discussions/1319 Is there any indication of whether authentication by short-lived codes sent through email is on the horizon?