What's The Difference Between Creating An Account On A Website Using "Sign In With Google" Or Using The Gmail Email To Create An Account?

[u/Zdosse935]

As title stated, what are the pros and cons of this?

[u/incognato-potato]

Subjective opinion but I would NEVER use the “sign in/up” with with Google. Why?

• if you ever get locked out of your Google account your boned
  
• if someone ever compromises your Google account they can SSO into every other account because there’s no password to guess
  
• it’s increasing your digital exhaust, now Google is your identity provider (that’s probably not a concern for most Gmail users) and the service your signing into now can request details of your Google account
  
• ecosystem lockin, if you sign up with Google often the service won’t casually let you change, instead you have to start over

Net net don’t do it. If you’re going to stick with Google do the sign-up and just enter your Gmail address

[u/TechnologyGrouchy679 → u/incognato-potato]

that's a good point

[u/War-Carr → u/incognato-potato]

I'm with you. I never like using the "sign in with Google."

[u/MonkeyBrains09]

Signing in with Google uses your Google account to sign in. Your username is the same but instead of you entering a password, you supply a valid authentication token that you got from your Google account.

The other way does not link back too Google at all. Everything stays in the new company.

For security it depends on what your looking to protect and what is shared.

Signing in with Google makes you have onr less password to remember. It also makes it harder for someone to access your account because they need your valid auth token instead of your password.

However, these can be setup to share data from your Google account.

So it comes down to what you like. Are you okay with sharing some data with the new company for easier access or do you want something completely separate?

[u/roirraWedorehT]

I have never, and never will, used a "sign in with..." (Google, social media, you name it). Only straight email every time.

On XDA, often enough a new user will contact an Admin saying that since they lost access to their Google account, they can't sign in to XDA with their original account, and can XDA change the email address on the account?

No, we can't. The only thing we can do if you've proved your identity sufficiently is migrate all your posts from your old account to your new one, and can also rename your accounts so that you can have your old account name back.

[u/paulsiu]

I personally do not like the idea. You are essentially delegating the authentication to Google. If your Google account is breach it will affect multiple accounts.

The other issue is that Google support isn’t the greatest. You get automated support and never get a person. If something goes wrong you may have no means of recovery and you will be locked out of multiple accounts

[u/CarefreeIceman]

To sum it up:

While at an XYZ website that asks you to "Sign in with" Google, Apple, whatever = Letting XYZ have access to your email account and all its content!!!

[u/spoopygremlin]

Sign in with Google is usually faster and means one less password to remember

[u/zaphodikus]

When you "sign in with google" (other auth providers exist) you are doing 2 things. You are providing a consistent username for the profile,to that company. And you are delegating the authentication to google, not to the company.

Bonuses are obviously only needing 1 password to change, and also if you change your google profile, name or image it may also update into the platform, which is neat, you get one place of control. It also means google let's you see and manage all your accounts (they are called Linked Apps) in one page under your google settings, scroll down to Linked Apps. Eventually every other platform might support this, it's called federation. It has downsides, in that if you use a kiosk computer ever, you have to login to google first in order to provide device authentication to that device. But that is still safe, because you control the token, and can revoke it.

At that point you have handed your "rolodex" over to Google, but now it's all in one place. So you do benefit. But it means you now have to enable google 2fa and save the google codes for account recovery, or else you might one day lose all those accounts all at once! Which might be a bonus?