How OAuth Works

We understand security is important. Here's how CraftConnect keeps your accounts safe.

We Never See Your Password

CraftConnect never asks for or stores your passwords. All authentication is handled directly by Discord, Microsoft, Riot Games, and Epic Games through a secure system called OAuth 2.0.

What is OAuth 2.0?

OAuth 2.0 is an industry-standard security protocol used by millions of websites and apps. It allows you to grant CraftConnect limited access to your account information without ever sharing your password.

How It Works (Simple Explanation)

1

You Click "Login with Discord"

CraftConnect redirects you to Discord's official login page.

2

You Log In on Discord's Website

You enter your password directly on Discord's secure servers - not on CraftConnect.

3

Discord Asks for Permission

Discord shows you exactly what information CraftConnect is requesting (username, ID, avatar).

4

You Approve

If you approve, Discord gives CraftConnect a special temporary key (called a token).

5

CraftConnect Accesses Only What You Approved

CraftConnect can now read your basic profile info, but nothing else. Your password stays with Discord.

What Information Does CraftConnect Access?

CraftConnect only requests the minimum information needed to link your accounts:

  • Discord: Your username, user ID, and profile picture
  • Microsoft/Xbox: Your gamertag and Xbox user ID
  • Riot Games: Your summoner name and Riot ID
  • Epic Games: Your display name and Epic account ID

We cannot access your password, email, payment information, or private messages.

You're Always in Control

  • You can revoke CraftConnect's access at any time from your Discord/Microsoft/Riot/Epic settings
  • You can unlink accounts from your CraftConnect profile page
  • You can request complete deletion of your data

The Bottom Line

OAuth 2.0 is the same secure technology used by websites when you see "Login with Google" or "Login with Facebook." It's designed specifically to keep your passwords safe while allowing secure account linking. Your password never leaves the original service's servers.

Still Have Questions?

If you have any concerns about how CraftConnect handles your data, please read our Privacy Policy or contact us through our support channels.