What OAuth means
OAuth is how most integrations connect securely, granting specific permissions that can be revoked. Review which apps have access to your accounts and remove ones you no longer use. Over-broad permissions are a quiet security risk.
Why it matters for your website
OAuth lets customers sign in with an account they already have, which can make sign-ups faster and reduce forgotten passwords. It also lets your tools connect, such as a form plugin linking to your email platform, without handing over passwords. Because it grants access, you should watch which apps have permission to your accounts.
Example
A scheduling plugin on a salon's website asks to connect to the owner's Google Calendar. She approves access through a Google screen and never types her password into the plugin.
Tips
- Review connected apps in your Google, Microsoft and social accounts and remove ones you don't use.
- Approve only the permissions an app actually needs.
- Use business accounts, not personal ones, for connections your site depends on.
Common mistakes
- Clicking 'Allow' on access requests without reading what permissions the app wants.
- Connecting key tools through an employee's personal account that disappears when they leave.
Questions about OAuth
What is OAuth?
A standard that lets one app access another on your behalf without sharing your password, such as "Sign in with Google."
Is 'Sign in with Google' safe?
Generally yes. Your password stays with Google, and the site only gets the information you approve. It's still worth checking which apps you've connected.
What is the difference between OAuth and single sign-on?
OAuth is a standard for granting access between apps. Single sign-on is the experience of using one login for many services, and it is often built using OAuth-based standards like OpenID Connect.
