OAuth
Technology & Computing abbreviation · Cybersecurity
| Stands for | Open Authorization |
|---|---|
| Categories | Technology & Computing |
OAuth stands for Open Authorization, a cybersecurity abbreviation.
An open standard that lets users grant an application limited access to their data on another service without sharing their password, using access tokens. "Sign in with Google" flows and apps that connect to your calendar or cloud storage rely on it.
Example: The app requests OAuth scopes to read your calendar but not to send email.
Usage notes
OAuth 1.0 appeared in 2007, and OAuth 2.0 was published as RFC 6749 in 2012. Strictly it is an authorization framework, not an authentication protocol; OpenID Connect adds identity on top. Consent phishing tricks users into granting malicious apps broad permissions. OAuth 2.1 is being drafted to consolidate best practices such as PKCE. Pronounced "oh-auth".
Related abbreviations
More cybersecurity abbreviations
- mTLS – Mutual TLS
- NAC – Network access control
- NDR – Network detection and response
- NGFW – Next-generation firewall
- NTLM – NT LAN Manager
- NVD – National Vulnerability Database
- OIDC – OpenID Connect
- OSCP – Offensive Security Certified Professional
- OSINT – Open-source intelligence
- OTP – One-time password
- OWASP – Open Worldwide Application Security Project
- PAM – Privileged access management