Passwordless by design
Donors don't want another account. The Donor Merchant portal uses magic-link sign-in: a donor enters the email they gave with, receives a secure one-time link, and lands on their dashboard. No password to create, forget, or leak. The link expires in 30 minutes and can be requested again any time.
What donors can do
- See their full giving history — every completed gift, with dates and amounts.
- Download receipts — any individual receipt, plus year-end tax statements, ready to print or save as PDF.
- Manage recurring gifts — update the card on file or cancel, handled on Stripe's own secure billing portal. No sensitive payment UI ever lives on your site.
Why this matters for you
"How do I update my card?" and "Can you send my receipt?" are the two most common donor support emails. The portal answers both without you lifting a finger — and donors who can fix a failing card themselves are donors you don't lose. It's the difference between a recurring program that quietly churns and one that compounds.
/my-donations/), add [donor_merchant_portal], and link it from your footer or receipts. That's the whole setup.Secure end to end
Magic-link tokens are single-purpose and short-lived, requests are rate-limited, and the email-entry form never reveals whether an address is on file. Card changes happen entirely within Stripe's hosted portal.