159

I've recently begun seeing common pop-ups on sites on which I do not have an account.

The pop-ups prompt me with my real name and Google sign-in email, which is being provided either by being signed in to Google/Gmail or being signed in to the desktop Chrome browser.

Sign in to example.com with Google

Your Name
email@example.com

CONTINUE AS NAME

To create your account, Google will share your name, email address, and profile picture with example.com. By continuing, you agree to example.com's privacy policy and terms of service.

The functionality providing this seems to be variously called: "Google One Tap", "Google YOLO", "You Only Log-in Once", the GoogleYOLO API for OpenYOLO, "Google One-tap sign-up and automatic sign-in", "Google Account sign-in prompts", "Sign in with Google", "Log in with Google", "Join with Google", "Use your Google Account to sign in to", "No more passwords to remember. Signing in is fast, simple and secure.", Google Chrome "third-party sign-in", third-party sign-in prompts, "dialogs that ask if you want to sign in with an identity service", federated sign-in, Google Identity Services, FedCM APIs, One Tap prompt.

One-tap sign-up and automatic sign-in

https://developers.google.com/identity/one-tap/web/

You can provide seamless authentication flows to your users with Google's one-tap sign-up and automatic sign-in APIs.

With one-tap sign-up, users are prompted to create an account with a dialog that's inline with your page's content, so they're never taken out of context by a sign-up page. With just one tap, they get a secure, token-based, passwordless account with your service, protected by their Google Account. And, of course, since there's such little sign-up friction, users are much more likely to register.

I frequently see the pop-up, obscuring the content, when I follow a link to Medium.com.

Sign in to medium.com with Google:

It is also being added to other random websites across the internet:

Sign in to WEBSITE with Google:


Large websites using this sign-in method include:

  • Sign in to medium.com with Google
  • Sign in to nytimes.com with Google
  • Sign in to eBay with Google
  • Sign in to Quora with Google
  • Sign in to trulia.com with Google
  • Sign in to Tripadvisor with Google
  • Use Pinterest with Google
  • Use hipmunk.com with Google
  • Create a wayfair.com account with Google
  • Use your Google Account to sign in to Reddit
  • Use your Google Account to sign in to Medium
  • Vimeo - Log in with Google

I don't object in principle to using my Google account to sign up for a service, but I do not want these pop-ups obscuring the site contents on page load.

This pop-up feels like a "notification" from Chrome, prompting me to use my signed-in Chrome account. It appears to be something I should be able to disable, like Chrome notifications, in my local copy of my web browser software.

Or, if not a Chrome browser notification, it also feels like something I should be able to disable from my Google account settings.

How do I disable these pop-ups and ensure they are not shown on any website? Settings-type changes preferred over content blockers, if possible.

pkamb
  • 4,775
  • 6
  • 40
  • 52

10 Answers10

173

You can disable these prompts from your Google account's Third-party apps & services settings page:

https://myaccount.google.com/connections/settings

Or go into your Google Account Settings and to the Security Tab. Here you will find a section "Your connections to third-party apps & services". Click "See all connections", and then click the gear icon button to go to settings.

Google Account sign-in prompts

Allow Google to offer a faster way to sign in with your Google Account on supported third-party sites

Toggle off "Google Account sign-in prompts" to disable these prompts across the web. You need to be signed in to your Google account while visiting websites for this setting to work.

Signing in with Google

Click refresh to make sure the new setting has stuck.

balazer
  • 311
Moonwolf
  • 1,902
32

In your Adblocker, block all content from smartlock.google.com. That will be the end of these popups.

This popup is provided by a Google service website owners can select to integrate on their websites.

user219095
  • 65,551
13

This has worked for me.

Add this line to your AdBlock Chrome extension under custom options:

accounts.google.com/gsi/*

ttt
  • 269
11

I started seeing pop-ups consistent with the appearance of the Google One-tap sign-in, but they extend beyond the browser window.

Learn about third-party sign-in

Third-party sign-in is a type of federated sign-in that allows you to log in with an identity service, instead of creating unique login credentials for each individual website you visit. If you allow third-party sign-in prompts, then as you browse the web, you may receive dialogs that ask if you want to sign in with an identity service.

You can sign into websites with Chrome through an identity service of your choice. An identity service stores and manages your sign-in information and identity across the web per your permission.

Attempts to follow the myriad suggestions online to disable this in your Google account settings did nothing. But I finally found a Chrome setting for Third-party sign-in:

chrome://settings/content/federatedIdentityApi

Third-party sign-in

Lets you sign in to websites using the account you have with an identity service

Default behavior — Sites automatically follow this setting when you visit them

  • Sites can show sign-in prompts from identity services
  • Block sign-in prompts from identity services

Selecting "Block sign-in prompts from identity services" here seems to suppress the new version of this pop-up.

Screenshot

pkamb
  • 4,775
  • 6
  • 40
  • 52
3

Install the uBlock Origin Firefox extension, then:

  1. Click the extension icon on the address bar,
  2. Click the gears icon (near the bottom),
  3. Click "My Filters" tab,
  4. Paste into the box, on a new line: accounts.google.com/gsi/*,
  5. Click "✔ Apply Changes".
zylstra
  • 4,148
2

Daniel's answer works on medium.com* (and probably others) but not in pinterest. That site keeps nagging you on every visit, and uses pop-up elements containing multiple 'random' ID strings (so you can't just filter on these). The substring to filter on for blocking the popup with AdBlock Plus seems to be:

&origin=https%3A%2F%2Fnl.pinterest.com

* Note that medium.com prompts you only once anyway; your (non-)response is kept in a cookie.

Jan Doggen
  • 4,657
1

uBlock Origin and other options won't work in Safari. Create a file ending with .css extension. Add the following:

/* prevent google one tap login window */
iframe[src^="https://accounts.google.com/gsi/iframe/"] {
  display: none !important;
}

Save the file; then point to it in the Safari -> Settings -> Advanced page's Style sheet: dropdown.

You can get more or less specific with the src value, if desired, but the above should work everywhere.

Edit: The above works on macOS without adding any extensions. To disable this prompt in Safari on iOS, use the free Userscripts app/extension with the instructions here. Create a .user.js file, similar to the example linked in that post, with the above CSS. Or, check my gist on Github for a file that works. (You can skip step 5 and navigate to this gist in step 6 of that post.)

leanne
  • 631
0

Understand One Tap User Experience

https://developers.google.com/identity/one-tap/web/guides/features

Google now tells us exactly how to opt-out of One Tap alerts:

Globally Opt Out

Users can opt out One Tap by disabling the "Google Account sign-in prompts" flag in the connected apps page. The opted-out sessions aren't shown in One Tap. If all Google sessions are opted out, One Tap won't display.

They also detail the specifics of when you will see the next One-Tap pop-up after closing one on the same website:

Exponential Cool Down

If a user closes One Tap by tapping the "X" button in the header, for a time period, One Tap won't display for the same website and in the same browser.

The following exponential time periods are used for cool down.

Consecutive Closing Times One Tap will be disabled
1 2 hours
2 1 day
3 1 week
4+ 4 weeks

The cool down status will be reset after a successful One Tap sign-in.

pkamb
  • 4,775
  • 6
  • 40
  • 52
0

The settings page now tells you that it needs to be adjusted in your browser, for desktop use:

enter image description here

That leads eventually to a help article with these steps:

  1. On your computer, open Chrome.
  2. At the top right, click More Organize and then Settings.
  3. On the left, click Privacy and security and then Site settings.
  4. Under “Content,” click Additional content settings and then Third-party sign-in.
  5. Select the setting you like:
    1. Sites can show sign-in prompts from identity services
    2. Block sign-in prompts from identity services
0

This is a website doing. Not sure why in these days any webmaster might be enticed to foster more Google privacy incursions but here we are.

  1. Install uBlock Origin extention
  2. Right click the popup
  3. Add it to the block list.
theking2
  • 519