Glossary · Protocol

OAUTH

Open Authorization

In plain language

The system behind buttons like Sign in with Google, which lets one app use part of your account without seeing your password.

The metaphor

Like a hotel keycard that opens one room for one night: it gets the guest where they need to go without handing over the master key.

Going deeper

How it works

You approve what an app may do, such as read your calendar.
The app gets a limited token and never learns your password.
Tokens can be withdrawn later from your account settings.
Scammers use fake consent screens to trick people into granting access.

What can go wrong (example scenario)

A two-person agency clicked Allow on a fake document app. It gained permission to read all of the owner's email, and the password never changed, so nothing seemed wrong.

How WILDCARD handles it

Cloud covers connected apps in your Microsoft 365 or Google tenant, including which ones may be approved.

In practice

An owner reviews which apps have access to company email.
A firm limits staff to approving a short list of apps.
A user removes an old scheduling tool she no longer uses.

A question owners ask

How do I see what apps have access to my account?

Check the connected apps or app permissions page in your Microsoft or Google account, and remove anything you do not use.

Where WILDCARD handles this

Cloud

Start with Cloud

Related terms

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →