78

I've recently begun seeing common pop-ups on sites on which I do not have an account.

The pop-ups prompt me with my real name and Google sign-in email, which is being provided either by being signed in to Google/Gmail or being signed in to the desktop Chrome browser.

Sign in to example.com with Google

Your Name
email@example.com

CONTINUE AS NAME

To create your account, Google will share your name, email address, and profile picture with example.com. By continuing, you agree to example.com's privacy policy and terms of service.

The functionality providing this seems to be variously called: "Google One Tap", "Google YOLO", "You Only Log-in Once", the GoogleYOLO API for OpenYOLO, "Google One-tap sign-up and automatic sign-in", "Google Account sign-in prompts", "Sign in with Google", "Log in with Google", "Join with Google".

One-tap sign-up and automatic sign-in

https://developers.google.com/identity/one-tap/web/

You can provide seamless authentication flows to your users with Google's one-tap sign-up and automatic sign-in APIs.

With one-tap sign-up, users are prompted to create an account with a dialog that's inline with your page's content, so they're never taken out of context by a sign-up page. With just one tap, they get a secure, token-based, passwordless account with your service, protected by their Google Account. And, of course, since there's such little sign-up friction, users are much more likely to register.

I frequently see the pop-up, obscuring the content, when I follow a link to Medium.com.

Sign in to medium.com with Google:

It is also being added to other random websites across the internet:

Sign in to WEBSITE with Google:


Large websites using this sign-in method include:

  • Sign in to medium.com with Google
  • Sign in to nytimes.com with Google
  • Sign in to eBay with Google
  • Sign in to Quora with Google
  • Sign in to trulia.com with Google
  • Sign in to Tripadvisor with Google
  • Use Pinterest with Google
  • Use hipmunk.com with Google
  • Create a wayfair.com account with Google

I don't object in principle to using my Google account to sign up for a service, but I do not want these pop-ups obscuring the site contents on page load.

This pop-up feels like a "notification" from Chrome, prompting me to use my signed-in Chrome account. It appears to be something I should be able to disable, like Chrome notifications, in my local copy of my web browser software.

Or, if not a Chrome browser notification, it also feels like something I should be able to disable from my Google account settings.

How do I disable these pop-ups and ensure they are not shown on any website? Settings-type changes preferred over content blockers, if possible.

5
90

You can disable these prompts from your Google account's permissions page:

https://myaccount.google.com/permissions

Or go into your Google Account Settings and to the Security Tab. Here you will find a section "Signing in to other sites". Select the "Signing in with Google" link to get to your permissions site.

Google Account sign-in prompts

Allow Google to offer a faster way to sign in with your Google Account on supported third-party sites

Toggle off "Google Account sign-in prompts" to disable these prompts across the web.

Signing in with Google

Don't be fooled by the toggle since it currently doesn't seem to display the toggle state correctly. Click it once and refresh.

5
  • 4
    Thank you! This has been annoying me for so long. I just tested, and I no longer get pop-ups on medium.com, so it seems to work :) Take my up vote – WickyNilliams May 14 '20 at 11:07
  • 1
    It does not work for medium.com now. – keithyip Jun 26 '20 at 3:45
  • 2
    +1 This solution worked for me on all sites, including eBay and Medium. Was able to slide the blue google settings slider off and on, then refresh the offending website for immediate results. – tahwos Jul 5 '20 at 16:28
  • Thank you! I always wonder if Google does this on purpose to annoy users. – LnxSlck Nov 13 '20 at 11:17
  • 1
    Wowsa, I had to do this in all google accounts before it went away. F***ing entire company is nothing but malware. So powerful it should be called its own style of product: MaaS: Malware As A Service. I wonder when they start selling my GCP logs. – Jason R Stevens CFA Feb 6 at 16:59
21

In your Adblocker, block all content from smartlock.google.com. That will be the end of these popups.

This popup is provided by a Google service website owners can select to integrate on their websites.

4
  • @pkamb, it also occurs in other browsers (apparently for Google whitelisted domains only, to mitigate click-jacking) so you'll probably not find a browser setting. – Arjan Oct 23 '19 at 21:11
  • 4
    smartlock.google.com is not enough to block it. You also have to block accounts.google.com. But, once you block accounts.google.com then none of google works. To be clear, some sites use smartlock.google.com, other sites use accounts.google.com – gman Oct 23 '19 at 21:49
  • 1
    As of 2020, the following uBlock Origin expression blocks that: accounts.google.com/gsi/iframe/$subdocument – gresolio Aug 9 '20 at 10:31
  • @gresolio +1 for your answer. It is working! – Logic1 Nov 16 '20 at 3:28
2

Daniel's answer works on medium.com* (and probably others) but not in pinterest. That site keeps nagging you on every visit, and uses pop-up elements containing multiple 'random' ID strings (so you can't just filter on these). The substring to filter on for blocking the popup with AdBlock Plus seems to be:

&origin=https%3A%2F%2Fnl.pinterest.com

* Note that medium.com prompts you only once anyway; your (non-)response is kept in a cookie.

1

Understand One Tap User Experience

https://developers.google.com/identity/one-tap/web/guides/features

Google now tells us exactly how to opt-out of One Tap alerts:

Globally Opt Out

Users can opt out One Tap by disabling the "Google Account sign-in prompts" flag in the connected apps page. The opted-out sessions aren't shown in One Tap. If all Google sessions are opted out, One Tap won't display.

They also detail the specifics of when you will see the next One-Tap pop-up after closing one on the same website:

Exponential Cool Down

If a user closes One Tap by tapping the "X" button in the header, for a time period, One Tap won't display for the same website and in the same browser.

The following exponential time periods are used for cool down.

Consecutive Closing Times One Tap will be disabled
1 2 hours
2 1 day
3 1 week
4+ 4 weeks

The cool down status will be reset after a successful One Tap sign-in.

Not the answer you're looking for? Browse other questions tagged or ask your own question.