138

I've recently begun seeing common pop-ups on sites on which I do not have an account.

The pop-ups prompt me with my real name and Google sign-in email, which is being provided either by being signed in to Google/Gmail or being signed in to the desktop Chrome browser.

Sign in to example.com with Google

Your Name
[email protected]

CONTINUE AS NAME

To create your account, Google will share your name, email address, and profile picture with example.com. By continuing, you agree to example.com's privacy policy and terms of service.

The functionality providing this seems to be variously called: "Google One Tap", "Google YOLO", "You Only Log-in Once", the GoogleYOLO API for OpenYOLO, "Google One-tap sign-up and automatic sign-in", "Google Account sign-in prompts", "Sign in with Google", "Log in with Google", "Join with Google", "Use your Google Account to sign in to", "No more passwords to remember. Signing in is fast, simple and secure."

One-tap sign-up and automatic sign-in

https://developers.google.com/identity/one-tap/web/

You can provide seamless authentication flows to your users with Google's one-tap sign-up and automatic sign-in APIs.

With one-tap sign-up, users are prompted to create an account with a dialog that's inline with your page's content, so they're never taken out of context by a sign-up page. With just one tap, they get a secure, token-based, passwordless account with your service, protected by their Google Account. And, of course, since there's such little sign-up friction, users are much more likely to register.

I frequently see the pop-up, obscuring the content, when I follow a link to Medium.com.

Sign in to medium.com with Google:

It is also being added to other random websites across the internet:

Sign in to WEBSITE with Google:

Large websites using this sign-in method include:

  • Sign in to medium.com with Google
  • Sign in to nytimes.com with Google
  • Sign in to eBay with Google
  • Sign in to Quora with Google
  • Sign in to trulia.com with Google
  • Sign in to Tripadvisor with Google
  • Use Pinterest with Google
  • Use hipmunk.com with Google
  • Create a wayfair.com account with Google
  • Use your Google Account to sign in to Reddit
  • Use your Google Account to sign in to Medium
  • Vimeo - Log in with Google

I don't object in principle to using my Google account to sign up for a service, but I do not want these pop-ups obscuring the site contents on page load.

This pop-up feels like a "notification" from Chrome, prompting me to use my signed-in Chrome account. It appears to be something I should be able to disable, like Chrome notifications, in my local copy of my web browser software.

Or, if not a Chrome browser notification, it also feels like something I should be able to disable from my Google account settings.

How do I disable these pop-ups and ensure they are not shown on any website? Settings-type changes preferred over content blockers, if possible.

Improve this question
6
  • 4
    It’s not Chrome, that much is certain. They’re actually part of the website.
    – Daniel B
    Mar 18, 2019 at 5:40
  • 6
    These YOLO login prompts are also vulnerable to clickjacking exploits.
    – pkamb
    Oct 24, 2019 at 9:04
  • 1
    support.google.com/accounts/thread/13860490
    – pkamb
    Aug 10, 2020 at 21:18
  • 2
    The comments above provided some useful background information, but I am curious, what do websites see if you don't click sign in with Google? Does the website know I have a Google account and what my name is even if I don't sign in?
    – jrh
    Sep 29, 2020 at 17:20
  • 2
    @jrh Great question, also wondering this, if anyone knows
    – Coldblackice
    Aug 2, 2021 at 4:31

4 Answers 4

Reset to default
168

You can disable these prompts from your Google account's Third-party apps & services settings page:

https://myaccount.google.com/connections/settings

Or go into your Google Account Settings and to the Security Tab. Here you will find a section "Your connections to third-party apps & services". Click "See all connections", and then click the gear icon button to go to settings.

Google Account sign-in prompts

Allow Google to offer a faster way to sign in with your Google Account on supported third-party sites

Toggle off "Google Account sign-in prompts" to disable these prompts across the web. You need to be signed in to your Google account while visiting websites for this setting to work.

Signing in with Google

Click refresh to make sure the new setting has stuck.

Improve this answer
12
  • 7
    Thank you! This has been annoying me for so long. I just tested, and I no longer get pop-ups on medium.com, so it seems to work :) Take my up vote
    – WickyNilliams
    May 14, 2020 at 11:07
  • 2
    +1 This solution worked for me on all sites, including eBay and Medium. Was able to slide the blue google settings slider off and on, then refresh the offending website for immediate results.
    – tahwos
    Jul 5, 2020 at 16:28
  • 2
    Wowsa, I had to do this in all google accounts before it went away. F***ing entire company is nothing but malware. So powerful it should be called its own style of product: MaaS: Malware As A Service. I wonder when they start selling my GCP logs.
    – Jason R Stevens CFA
    Feb 6, 2021 at 16:59
  • 10
    Just fyi, this option appears to be completely useless for some users like myself as of 2 months ago, it does absolutely nothing now, it keeps prompting for every single visit on every single website that has this embedded and no amount of closing it will "pause" it on the next visit. Only thing that works is to block it with uBlock, for example.
    – Shadow
    Nov 10, 2022 at 18:32
  • 6
    Having to constantly being logged in to a Google account in order to prevent the popups are not a viable solution to the problem.
    – mat
    Jan 30 at 10:37
27

In your Adblocker, block all content from smartlock.google.com. That will be the end of these popups.

This popup is provided by a Google service website owners can select to integrate on their websites.

Improve this answer
6
  • @pkamb, it also occurs in other browsers (apparently for Google whitelisted domains only, to mitigate click-jacking) so you'll probably not find a browser setting.
    – Arjan
    Oct 23, 2019 at 21:11
  • 7
    smartlock.google.com is not enough to block it. You also have to block accounts.google.com. But, once you block accounts.google.com then none of google works. To be clear, some sites use smartlock.google.com, other sites use accounts.google.com
    – gman
    Oct 23, 2019 at 21:49
  • 10
    As of 2020, the following uBlock Origin expression blocks that: accounts.google.com/gsi/iframe/$subdocument
    – gresolio
    Aug 9, 2020 at 10:31
  • 1
    @gresolio Please make this an answer. It is the only real solution to the problem described by the OP IMO
    – mat
    Jan 30 at 10:35
  • 1
    This didn't work for me, but this did (using Ublock filter): superuser.com/a/1773215/142948
    – artfulrobot
    Mar 23 at 11:11
3

Understand One Tap User Experience

https://developers.google.com/identity/one-tap/web/guides/features

Google now tells us exactly how to opt-out of One Tap alerts:

Globally Opt Out

Users can opt out One Tap by disabling the "Google Account sign-in prompts" flag in the connected apps page. The opted-out sessions aren't shown in One Tap. If all Google sessions are opted out, One Tap won't display.

They also detail the specifics of when you will see the next One-Tap pop-up after closing one on the same website:

Exponential Cool Down

If a user closes One Tap by tapping the "X" button in the header, for a time period, One Tap won't display for the same website and in the same browser.

The following exponential time periods are used for cool down.

Consecutive Closing Times One Tap will be disabled
1 2 hours
2 1 day
3 1 week
4+ 4 weeks

The cool down status will be reset after a successful One Tap sign-in.

Improve this answer
1
  • 4
    I've been closing these things for months, and they continue show up. This functionality is either broken, or no longer works as described by your answer.
    – NeverEatAlone
    Jan 22, 2022 at 9:46
2

Daniel's answer works on medium.com* (and probably others) but not in pinterest. That site keeps nagging you on every visit, and uses pop-up elements containing multiple 'random' ID strings (so you can't just filter on these). The substring to filter on for blocking the popup with AdBlock Plus seems to be:

&origin=https%3A%2F%2Fnl.pinterest.com

* Note that medium.com prompts you only once anyway; your (non-)response is kept in a cookie.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .