One account. No password, if you would rather not have one.
A single sign-in across the shop, the brewery and the pub, built around an emailed link rather than a password, with no memory test, no picture grid and no puzzle anywhere in it.
How it works.
You type an email address
That is the whole form. One field.
A link arrives
Valid for fifteen minutes, single use, and it dies the moment it is used.
You are in, everywhere
The shop, the brewery, the pub booking and the dashboard, in one go.
Or set a password if you prefer
Optional. A password manager works, a fifty-character passphrase works, and there are no composition rules to fight.
Or add a passkey
Which is the best option available and the one we would choose for you if we were allowed to choose.
It lasts ninety days
Then it asks again. A shopping account is not a bank and does not need to log you out weekly.
What one account joins together.
| System | What signing in gives you | What it does not |
|---|---|---|
| The farm shop | Order history, addresses, the wishlist | A shorter queue on a Saturday |
| The brewery | Runes, orders, and the Order of Hawkstone | Any relaxation of the age check |
| The pub | Your bookings and the priority window at your tier | A table that does not exist |
| Plotting and Maturing | Your patches, your casks and their records | Any right to walk on the land |
| This dashboard | All of the above on one screen | Anything about anybody else |
Why an emailed link is the default.
Because passwords on a farm shop account are a liability rather than a security measure. They get reused from somewhere that has been breached, they get written down, and the reset flow ends up being an emailed link anyway — which means the email inbox was always the real credential.
So we start there and skip the theatre. The link is single-use, expires in fifteen minutes, and does not work if it is opened on a different device from the one that asked for it.
Anybody who would rather have a password can have one, with no composition rules, no forced rotation and a length limit high enough for a real passphrase. Anybody who wants a passkey should use one, and about a fifth of people now do.
One field
An email address. That is the entire sign-in form.
No puzzles
No memory test, no picture grid, no distorted text. WCAG 2.2, requirement 3.3.8.
Ninety days
How long a session lasts. A shop is not a bank.
Age checks are separate
Signing in proves who you are. It does not prove how old you are.
Signing in is not an age check, and never becomes one.
Being logged in tells us which account you are. It does not tell us your age, and an account that passed an age check in 2024 gets asked again at the basket, at checkout and at the door for anything alcoholic. Nothing about being a member shortens that.
Signing in, questioned.
Then you have lost the account, and we will not restore it on the strength of a conversation. That is uncomfortable and it is the correct answer — an account recoverable by persuasion is an account anybody persuasive can take.
Technically yes and we would rather you did not, because the matching logic then merges two people’s histories and the dashboard becomes nonsense. It has happened twice.
Usually because it is over fifteen minutes old, or because it was requested on a phone and opened on a laptop. Ask for another; there is no limit.
Yes, and they are the best option here. About a fifth of accounts use one.
What the account then shows you.
Six holdings, a wallet, a year and a board.
