Links are rate-limited and can misbehave inside a mail app's built-in browser. The password is the reliable one.