A computer-implemented method for enabling passwordless access to a content management system, the method comprising: receiving, by a content management system from a first computing device, a first request to access a user account at the content management system, the first request comprising an email address registered with the user account; in response to the first request, generating, by the content management system, two tokens for access to the user account, the two tokens comprising a client token associated with the first computing device and an email token associated with the first computing device upon being accessed through an email account corresponding to the email address; sending the client token to a client application at the first computing device; sending, to the email address, an email containing a link that, when selected by the first computing device, causes the email token to be sent to the client application on the first computing device; and when selected by a second computing device causes a notification to be sent from the second computing device to the content management system indicating that the link was selected from a different device than the first computing device; wherein selecting the link via the first computing device further causes: receiving, by the content management system from the first computing device, a second request to access the user account; determining, by the content management system, that the second request comprises both the client token and the email token, and; in response to determining that the second request comprises both the client token and the email token, providing, by the content management system to the first computing device, access to the user account; wherein selecting the link via the second computing device further causes: based on the received notification, sending by the content management system an authorization code to the first computing device; receiving, from the second computing device, the authorization code; and in response thereto providing, by the content management system to the second computing device, access to the user account. receiving, by a content management system from a first computing device, a first request to access a user account at the content management system, the first request comprising an email address registered with the user account; in response to the first request, generating, by the content management system, two tokens for access to the user account, the two tokens comprising a client token associated with the first computing device and an email token associated with the first computing device upon being accessed through an email account corresponding to the email address; sending the client token to a client application at the first computing device; sending, to the email address, an email containing a link that, when selected by the first computing device, causes the email token to be sent to the client application on the first computing device; and when selected by a second computing device causes a notification to be sent from the second computing device to the content management system indicating that the link was selected from a different device than the first computing device; when selected by the first computing device, causes the email token to be sent to the client application on the first computing device; and when selected by a second computing device causes a notification to be sent from the second computing device to the content management system indicating that the link was selected from a different device than the first computing device; wherein selecting the link via the first computing device further causes: receiving, by the content management system from the first computing device, a second request to access the user account; determining, by the content management system, that the second request comprises both the client token and the email token, and; in response to determining that the second request comprises both the client token and the email token, providing, by the content management system to the first computing device, access to the user account; receiving, by the content management system from the first computing device, a second request to access the user account; determining, by the content management system, that the second request comprises both the client token and the email token, and; in response to determining that the second request comprises both the client token and the email token, providing, by the content management system to the first computing device, access to the user account; wherein selecting the link via the second computing device further causes: based on the received notification, sending by the content management system an authorization code to the first computing device; receiving, from the second computing device, the authorization code; and in response thereto providing, by the content management system to the second computing device, access to the user account. based on the received notification, sending by the content management system an authorization code to the first computing device; receiving, from the second computing device, the authorization code; and in response thereto providing, by the content management system to the second computing device, access to the user account.