Reddit Logging in with Google Accounts Automatically
from andros_rex@lemmy.world to technology@lemmy.world on 25 Sep 2024 13:37
https://lemmy.world/post/20169771
from andros_rex@lemmy.world to technology@lemmy.world on 25 Sep 2024 13:37
https://lemmy.world/post/20169771
The first time it happened, I wasn’t sure if it was an accident but it has happened again multiple times since.
I have a google account that I use for YouTube because it has premium and that is useful in my work. It also as a long dead Reddit account associated with it.
Multiple times, on my work computer, when I end up on Reddit from google a question, the top right will find my google account, and AUTOMATICALLY LOG INTO REDDIT. I have logged out multiple times.
These is extremely concerning - the fact that I am logged in with google does not consent me to log into Reddit. I do not want that Reddit account associated with my work.
threaded - newest
If you’re on Firefox, take a look at the Containers extension. It helps keeping everything separated
This is the suggestion i had too
Yep. The “always open in container tab” gets a little fidgety because Reddit uses a whole bunch of different domains (some of which it only flips to for an instant while redirecting elsewhere), so it takes a bit of work, but I’ve been able to successfully silo off Reddit, Xwitter, Meta, etc. into their own distinct containers that are independent of everything else I do.
libredirect.github.io
Doesn’t answer your question but might setup this on your work computer.
Google has a function to limit or remove third party connections/accounts from your google account. You should be able to change that if you wanted to.
I’ve just never had this happen with any other service. Usually you are expected to click through something to log in with google. The fact that Reddit is looking at every google account your computer is logged into, and then forcibly logging in any that are associated feels like a serious violation of privacy.
Definitely agreed. Then again, Reddit has stopped being user or privacy friendly for a long time now.
That’s not even possible. As somebody else pointed out, you’re logging in unintentionally on your end, probably with the Google password manager.
The only time that account has ever been used on that computer had been to log into YouTube, once.
Make sure your login credentials aren’t saved in the browser and keep logged out of your Google account elsewhere. It would be easy to have all your cookies deleted when you close your browser.
In the security page on Google’s account site there is a card with the title “Your connections to third-party apps & services”. Go there, click “See all connections” and click Reddit. From here you can remove access for Reddit and/or delete all connections between your Google account and Reddit.
Does that equate to actually deleting the Reddit account in question though? I assume only the connection is severed, but Reddit still retains the userdata from now a disconnected ghost account.
It doesn’t do anything except divorce the accounts.
I’m 98% sure you can still log in again, it just invalidates the access token that Reddit has received from Google. The effect is that when you log in next time you end up at Google’s authorization screen where you have to explicitly give Reddit access again.
myaccount.google.com
Go here.
Go to the left side where it says Data & Privacy.
Scroll down to Data from apps and services you use
Under that is Third-party apps & services
Scroll down to Reddit
Click Delete all connections you have with Reddit
You should consider a few things here, because you’re grossly underestimating Google’s power
If you are logged into Google, and you are on that website, it’s already associated with you, regardless of whether you are signed in or not (along with many other platforms). So many different ways.
Consider using containerization. In Chromium you can use profiles. In FF you can use container tabs. That goes for any of their forks as well.
A home and a work profile for chrome, that means a different email for each login.
Keeps nicely things apart.
This is actually a google account feature called “auto signin”. If you go to google password manager and click on the settings button in the top right there should be an option called Auto Sign-in you can disable.
Anyway to disable the popup?
I have ublock configured to block it.
Teach me, master! HOW?! I NEED to know!
This is why on the occasion a thread crosses a reddit post it gets opened incognito.
I use LibRedirect to redirect the request to LibReddit. Much easier. But that works, too!
this should be impossible unless you give it access to use your google credentials. you should be able to turn it off in your google security settings.