Should you use “Sign in with” buttons?

How it works

When you use a “Sign in with” button, the website does not get your password. Instead, it sends you to the account you already have, such as your work Microsoft account or a large email provider. You sign in there, and it tells the website who you are.

The advantages

• One less password to create, remember or reuse.
• Your existing protections apply, including multi-factor authentication.
• For work accounts, IT can see which apps are connected and remove access when someone leaves.

Things to watch

• Read what the app is asking for. Some only want your name and email address. Others ask to read your email, files or contacts. Decline anything that asks for more than it needs.
• Be careful with fake consent requests. Some phishing attacks send a link that asks you to grant an app access to your mailbox. If you did not go looking for the app, do not approve it.
• Losing the main account means losing access to the rest. Protect it well.
• Use your work account only for work tools. Personal shopping or social sites should not be linked to your company account.

Clean up

Every so often, review which apps are connected to your accounts and remove the ones you no longer use. For work accounts, IT can do this across the whole company.