What is OAuth and why does RecordFlower ask for permission once?

When linking your Discogs account to RecordFlower, you will see the term OAuth. What exactly is that and why is it secure?

What is OAuth?

OAuth is an open standard for secure account linking. It is used by major platforms such as Google, Facebook and Discogs to allow third-party applications - such as RecordFlower - to access certain data without you sharing your password.

In practice, it works like this: you are redirected to Discogs, log in with your own Discogs credentials and give RecordFlower permission to read your inventory. RecordFlower never sees your password.

What RecordFlower can and cannot do

RecordFlower only has read access to your Discogs inventory. The platform cannot delete items, change your password or perform other actions on your Discogs account. The permission is specific and limited to what is necessary for synchronization.

Withdraw consent

Do you want to break the link? You can revoke the OAuth permission at any time through your Discogs account settings. After revocation, RecordFlower will automatically stop syncing. Your shop will remain active until you cancel your subscription.

What does this mean for you?

OAuth is secure, transparent and completely in your own control. You give RecordFlower only what is needed - and you can reverse it at any time.

Questions about the Discogs link? Get in touch via our support team at recordflower.com.