153

I've recently begun seeing common pop-ups on sites on which I do not have an account.

The pop-ups prompt me with my real name and Google sign-in email, which is being provided either by being signed in to Google/Gmail or being signed in to the desktop Chrome browser.

Sign in to example.com with Google

Your Name
[email protected]

CONTINUE AS NAME

To create your account, Google will share your name, email address, and profile picture with example.com. By continuing, you agree to example.com's privacy policy and terms of service.

The functionality providing this seems to be variously called: "Google One Tap", "Google YOLO", "You Only Log-in Once", the GoogleYOLO API for OpenYOLO, "Google One-tap sign-up and automatic sign-in", "Google Account sign-in prompts", "Sign in with Google", "Log in with Google", "Join with Google", "Use your Google Account to sign in to", "No more passwords to remember. Signing in is fast, simple and secure.", Google Chrome "third-party sign-in", third-party sign-in prompts, "dialogs that ask if you want to sign in with an identity service", federated sign-in.

One-tap sign-up and automatic sign-in

https://developers.google.com/identity/one-tap/web/

You can provide seamless authentication flows to your users with Google's one-tap sign-up and automatic sign-in APIs.

With one-tap sign-up, users are prompted to create an account with a dialog that's inline with your page's content, so they're never taken out of context by a sign-up page. With just one tap, they get a secure, token-based, passwordless account with your service, protected by their Google Account. And, of course, since there's such little sign-up friction, users are much more likely to register.

I frequently see the pop-up, obscuring the content, when I follow a link to Medium.com.

Sign in to medium.com with Google:

It is also being added to other random websites across the internet:

Sign in to WEBSITE with Google:

Large websites using this sign-in method include:

  • Sign in to medium.com with Google
  • Sign in to nytimes.com with Google
  • Sign in to eBay with Google
  • Sign in to Quora with Google
  • Sign in to trulia.com with Google
  • Sign in to Tripadvisor with Google
  • Use Pinterest with Google
  • Use hipmunk.com with Google
  • Create a wayfair.com account with Google
  • Use your Google Account to sign in to Reddit
  • Use your Google Account to sign in to Medium
  • Vimeo - Log in with Google

I don't object in principle to using my Google account to sign up for a service, but I do not want these pop-ups obscuring the site contents on page load.

This pop-up feels like a "notification" from Chrome, prompting me to use my signed-in Chrome account. It appears to be something I should be able to disable, like Chrome notifications, in my local copy of my web browser software.

Or, if not a Chrome browser notification, it also feels like something I should be able to disable from my Google account settings.

How do I disable these pop-ups and ensure they are not shown on any website? Settings-type changes preferred over content blockers, if possible.

Improve this question
7
  • 7
    It’s not Chrome, that much is certain. They’re actually part of the website.
    – Daniel B
    Commented Mar 18, 2019 at 5:40
  • 7
    These YOLO login prompts are also vulnerable to clickjacking exploits.
    – pkamb
    Commented Oct 24, 2019 at 9:04
  • 1
    support.google.com/accounts/thread/13860490
    – pkamb
    Commented Aug 10, 2020 at 21:18
  • 2
    The comments above provided some useful background information, but I am curious, what do websites see if you don't click sign in with Google? Does the website know I have a Google account and what my name is even if I don't sign in?
    – jrh
    Commented Sep 29, 2020 at 17:20
  • 4
    @jrh Great question, also wondering this, if anyone knows
    – Coldblackice
    Commented Aug 2, 2021 at 4:31

8 Answers 8

Reset to default
175

You can disable these prompts from your Google account's Third-party apps & services settings page:

https://myaccount.google.com/connections/settings

Or go into your Google Account Settings and to the Security Tab. Here you will find a section "Your connections to third-party apps & services". Click "See all connections", and then click the gear icon button to go to settings.

Google Account sign-in prompts

Allow Google to offer a faster way to sign in with your Google Account on supported third-party sites

Toggle off "Google Account sign-in prompts" to disable these prompts across the web. You need to be signed in to your Google account while visiting websites for this setting to work.

Signing in with Google

Click refresh to make sure the new setting has stuck.

Improve this answer
15
  • 8
    Thank you! This has been annoying me for so long. I just tested, and I no longer get pop-ups on medium.com, so it seems to work :) Take my up vote
    – WickyNilliams
    Commented May 14, 2020 at 11:07
  • 4
    +1 This solution worked for me on all sites, including eBay and Medium. Was able to slide the blue google settings slider off and on, then refresh the offending website for immediate results.
    – tahwos
    Commented Jul 5, 2020 at 16:28
  • 17
    Just fyi, this option appears to be completely useless for some users like myself as of 2 months ago, it does absolutely nothing now, it keeps prompting for every single visit on every single website that has this embedded and no amount of closing it will "pause" it on the next visit. Only thing that works is to block it with uBlock, for example.
    – Shadow
    Commented Nov 10, 2022 at 18:32
  • 8
    Having to constantly being logged in to a Google account in order to prevent the popups are not a viable solution to the problem.
    – mat
    Commented Jan 30, 2023 at 10:37
  • 4
    @Shadow same here. Keep getting this despite disabling the sign-in prompt on all 3 of my Google accounts. Just started happening in the last ~2 months or so.
    – James
    Commented Jan 30, 2023 at 16:29
29

In your Adblocker, block all content from smartlock.google.com. That will be the end of these popups.

This popup is provided by a Google service website owners can select to integrate on their websites.

Improve this answer
6
  • @pkamb, it also occurs in other browsers (apparently for Google whitelisted domains only, to mitigate click-jacking) so you'll probably not find a browser setting.
    – Arjan
    Commented Oct 23, 2019 at 21:11
  • 7
    smartlock.google.com is not enough to block it. You also have to block accounts.google.com. But, once you block accounts.google.com then none of google works. To be clear, some sites use smartlock.google.com, other sites use accounts.google.com
    – gman
    Commented Oct 23, 2019 at 21:49
  • 15
    As of 2020, the following uBlock Origin expression blocks that: accounts.google.com/gsi/iframe/$subdocument
    – gresolio
    Commented Aug 9, 2020 at 10:31
  • 2
    @gresolio Please make this an answer. It is the only real solution to the problem described by the OP IMO
    – mat
    Commented Jan 30, 2023 at 10:35
  • 2
    This didn't work for me, but this did (using Ublock filter): superuser.com/a/1773215/142948
    – artfulrobot
    Commented Mar 23, 2023 at 11:11
8

This has worked for me.

Add this line to your AdBlock Chrome extension under custom options:

accounts.google.com/gsi/*

Improve this answer
1
  • 2
    This is the real answer, when you don't even have a google account or you're not signed into google at all, or browsing anonymously, etc. +1!
    – Xen2050
    Commented May 10 at 12:46
5

I started seeing pop-ups consistent with the appearance of the Google One-tap sign-in, but they extend beyond the browser window.

Learn about third-party sign-in

Third-party sign-in is a type of federated sign-in that allows you to log in with an identity service, instead of creating unique login credentials for each individual website you visit. If you allow third-party sign-in prompts, then as you browse the web, you may receive dialogs that ask if you want to sign in with an identity service.

You can sign into websites with Chrome through an identity service of your choice. An identity service stores and manages your sign-in information and identity across the web per your permission.

Attempts to follow the myriad suggestions online to disable this in your Google account settings did nothing. But I finally found a Chrome setting for Third-party sign-in:

chrome://settings/content/federatedIdentityApi

Third-party sign-in

Lets you sign in to websites using the account you have with an identity service

Default behavior — Sites automatically follow this setting when you visit them

  • Sites can show sign-in prompts from identity services
  • Block sign-in prompts from identity services

Selecting "Block sign-in prompts from identity services" here seems to suppress the new version of this pop-up.

Screenshot

Improve this answer
5
  • Have a picture?
    – pkamb
    Commented Apr 20 at 17:53
  • 1
    Wow, are they serious? You can't even navigate to that "Third-party sign-in" page except by knowing the direct URL. Not even the search function in Settings will display it.
    – AlwaysLearning
    Commented Apr 28 at 8:07
  • This has worked for me, thanks!
    – Realfun
    Commented May 9 at 16:17
  • I still cannot find it in Settings by myself, thank you so much for that chrome link. This answer should be on top!
    – Anton Dieterle
    Commented Jun 13 at 5:44
  • I'd like to see a screenshot of what this looks like in the browser/website when one of these pops up.
    – pkamb
    Commented Jun 14 at 2:03
2

Daniel's answer works on medium.com* (and probably others) but not in pinterest. That site keeps nagging you on every visit, and uses pop-up elements containing multiple 'random' ID strings (so you can't just filter on these). The substring to filter on for blocking the popup with AdBlock Plus seems to be:

&origin=https%3A%2F%2Fnl.pinterest.com

* Note that medium.com prompts you only once anyway; your (non-)response is kept in a cookie.

Improve this answer
2

Understand One Tap User Experience

https://developers.google.com/identity/one-tap/web/guides/features

Google now tells us exactly how to opt-out of One Tap alerts:

Globally Opt Out

Users can opt out One Tap by disabling the "Google Account sign-in prompts" flag in the connected apps page. The opted-out sessions aren't shown in One Tap. If all Google sessions are opted out, One Tap won't display.

They also detail the specifics of when you will see the next One-Tap pop-up after closing one on the same website:

Exponential Cool Down

If a user closes One Tap by tapping the "X" button in the header, for a time period, One Tap won't display for the same website and in the same browser.

The following exponential time periods are used for cool down.

Consecutive Closing Times One Tap will be disabled
1 2 hours
2 1 day
3 1 week
4+ 4 weeks

The cool down status will be reset after a successful One Tap sign-in.

Improve this answer
2
  • 7
    I've been closing these things for months, and they continue show up. This functionality is either broken, or no longer works as described by your answer.
    – NeverEatAlone
    Commented Jan 22, 2022 at 9:46
  • This answer is for Android devices only. mac, gnu-linux, windows devices will still show the popup.
    – theking2
    Commented Jun 15 at 7:24
0

The settings page now tells you that it needs to be adjusted in your browser, for desktop use:

enter image description here

That leads eventually to a help article with these steps:

  1. On your computer, open Chrome.
  2. At the top right, click More Organize and then Settings.
  3. On the left, click Privacy and security and then Site settings.
  4. Under “Content,” click Additional content settings and then Third-party sign-in.
  5. Select the setting you like:
    1. Sites can show sign-in prompts from identity services
    2. Block sign-in prompts from identity services
Improve this answer
2
  • @xionchiamiov this is useless for the more savvy, none-chome users
    – theking2
    Commented Jun 8 at 16:52
  • @theking2 Not useful for people who use browsers other than Chrome, sure. I reject the idea however that the population of Super User is disjoint with the population of Chrome users. That's supported by the fact there are over eleven thousand google-chrome questions on the site - and in fact, this question is one of them!
    – Xiong Chiamiov
    Commented Jun 10 at 21:29
0

This is a website doing. Not sure why in these days any webmaster might be enticed to foster more Google privacy incursions but here we are.

  1. Install uBlock Origin extention
  2. Right click the popup
  3. Add it to the block list.
Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .