How to disable pop-ups for Google "YOLO" / "One-Tap Sign-Up"?

28

8

Recently I've begun to see common pop-ups when visiting sites on which I do not have an account.

The pop-ups prompt me with my real name and Google sign-in email, which is being provided either by being signed in to Google/Gmail or being signed in to the desktop Chrome browser.

Sign in to example.com with Google

Your Name
email@example.com

To create your account, Google will share your name, email address, and profile picture with example.com. By continuing, you agree to example.com's privacy policy and terms of service.

The functionality providing this seems to be "Google YOLO" and/or "One-tap sign-up and automatic sign-in":

One-tap sign-up and automatic sign-in

https://developers.google.com/identity/one-tap/web/overview

You can provide seamless authentication flows to your users with Google's one-tap sign-up and automatic sign-in APIs.

With one-tap sign-up, users are prompted to create an account with a dialog that's inline with your page's content, so they're never taken out of context by a sign-up page. With just one tap, they get a secure, token-based, passwordless account with your service, protected by their Google Account. And, of course, since there's such little sign-up friction, users are much more likely to register.

I frequently see the pop-up, obscuring the content, when I follow a link to Medium.com.

Sign in to medium.com with Google:

It is also being added to other random websites across the internet:

Sign in to WEBSITE with Google:


Large websites using this sign-in method include:

  • Sign in to medium.com with Google
  • Sign in to nytimes.com with Google
  • Use Pinterest with Google
  • Use hipmunk.com with Google
  • Sign in to trulia.com with Google

I don't object in principle to using my Google account to sign up for a service, but I do not want these pop-ups obscuring the site contents on page load.

This pop-up feels like a "notification" from Chrome, prompting me to use my signed-in Chrome account. It appears to be something I should be able to disable, like Chrome notifications, in my local copy of my web browser software.

Or, if not a Chrome browser notification, it also feels like something I should be able to disable from my Google account settings.

How do I disable these pop-ups and ensure they are not shown on any website? Settings-type changes preferred over content blockers, if possible.

pkamb

Posted 2019-03-15T20:05:29.887

Reputation: 1 049

3It’s not Chrome, that much is certain. They’re actually part of the website. – Daniel B – 2019-03-18T05:40:01.313

These YOLO login prompts are also vulnerable to clickjacking exploits.

– pkamb – 2019-10-24T09:04:48.720

Answers

19

In your Adblocker, block all content from smartlock.google.com. That will be the end of these popups.

This popup is provided by a Google service website owners can select to integrate on their websites.

Daniel B

Posted 2019-03-15T20:05:29.887

Reputation: 40 502

I will change the accepted answer if anyone knows how to do this via a Setting / Preference in Chrome or in your Google Account. – pkamb – 2019-10-02T22:30:57.567

@pkamb, it also occurs in other browsers (apparently for Google whitelisted domains only, to mitigate click-jacking) so you'll probably not find a browser setting.

– Arjan – 2019-10-23T21:11:36.027

2smartlock.google.com is not enough to block it. You also have to block accounts.google.com. But, once you block accounts.google.com then none of google works. To be clear, some sites use smartlock.google.com, other sites use accounts.google.com – gman – 2019-10-23T21:49:56.110

2

Daniel's answer works on medium.com* (and probably others) but not in pinterest. That site keeps nagging you on every visit, and uses pop-up elements containing multiple 'random' ID strings (so you can't just filter on these). The substring to filter on for blocking the popup with AdBlock Plus seems to be:

&origin=https%3A%2F%2Fnl.pinterest.com

* Note that medium.com prompts you only once anyway; your (non-)response is kept in a cookie.

Jan Doggen

Posted 2019-03-15T20:05:29.887

Reputation: 3 591

0

For the time being the only way to disable it, is by disabling Chrome's setting offering to save any site's password.

Image showing the settings menu, Offer to save passwords toggle

Tom Roggero

Posted 2019-03-15T20:05:29.887

Reputation: 101

Really? Chrome's "offer to save passwords" setting also controls the on-webpage Google sign-up? – pkamb – 2020-02-21T18:36:09.253