Google One Tap Sign In

Mage2Expert Google One Tap Sign In is an extension for Magento 2 that lets shoppers sign in or register on your storefront with a single tap of their Google account — no password to create, type, or remember. Google verifies the shopper's identity and returns a signed credential to the store, which is independently verified again on the server before any customer record is touched. Returning customers already in your customer table are recognized instantly by their Google-verified email address and signed straight in; visitors with no matching account can be registered automatically, assigned to the customer group you choose, subject to settings you control entirely from the admin panel. The result is a faster, lower-friction path to checkout for guests who would otherwise abandon a lengthy registration form, without giving up any control over who gets an account or how it's created. 

Features

• One-Tap Sign-In & Sign-Up — renders Google's native One Tap prompt to guest visitors automatically, letting them continue with their Google account in a single tap instead of filling in a login or registration form.
• Server-Side Token Verification — every credential returned by Google is independently re-verified against Google's own servers before any account is looked up or created, confirming the token is genuine, unexpired, issued specifically for your configured Client ID, and carries a Google-verified email address.
• Email-Matched Customer Login — a Google account whose verified email matches an existing customer signs that customer in immediately, with no duplicate account ever created.
• Automatic Account Creation — a Google account with no matching customer can automatically register a new account, complete with a random unguessable password and immediate confirmation, assigned to the Default Customer Group configured in the admin.
• Auto Sign-Up Toggle — turn automatic registration off entirely to restrict Google One Tap to existing customers only, while still offering them a fast, passwordless login.
• Auto Sign-In for Returning Visitors — optionally skip the tap altogether for visitors Google already recognizes, signing them in the moment the page loads.
• Cancel on Tap Outside — dismiss the prompt the moment a visitor clicks elsewhere on the page, for a non-intrusive storefront experience.
• Configurable Prompt Position — choose the screen corner — top left, top right, bottom left, or bottom right — the One Tap prompt should appear in.
• Welcome Email Control — choose whether Magento's standard new-account email is sent for accounts auto-created via One Tap, independently of your store's normal registration email behavior.
• Store-View Scope Throughout — every setting is fully store-view scoped, making the extension suitable for multi-store and multi-language setups from the start.
• Enable / Disable Without Uninstalling — a master switch in Stores → Configuration → Magento Expert → Google One Tap Sign-In turns the prompt off site-wide instantly, with every setting preserved for whenever you turn it back on.
• Zero Core Code Modifications — built entirely on Magento's standard block, layout XML, controller, and plugin architecture. No class rewrites, no preferences, no patches. Safe alongside Magento upgrades and other extensions.

How It Works

Once enabled with a Google OAuth Client ID, the One Tap prompt appears automatically for guest visitors across the storefront. A shopper taps their Google account, and the extension receives a signed credential from Google. That credential is verified directly against Google before anything else happens — confirming its authenticity, its intended audience, and that the associated email address is genuinely verified. The verified email is then matched against your existing customers: a match signs the shopper straight in, while no match either creates a new account automatically (if enabled) or declines the sign-in with a clear message, according to your configuration. From the shopper's perspective, the entire flow takes a single tap. 

Security & Trust

No shopper credential is ever trusted at face value. Every Google sign-in token is checked for three things before a customer record is touched: that it was genuinely issued by Google and has not expired, that it was issued specifically for your store's own Client ID rather than replayed from another site, and that the email address it carries is verified by Google rather than merely claimed. Accounts created through this flow never store a Google-derived password — authentication continues to rely on Google's own sign-in for every future visit. 

Use Cases

• High-abandonment checkout flows — reduce the number of shoppers who abandon at registration by offering a one-tap alternative to filling in a full sign-up form.
• Mobile-first storefronts — spare shoppers from typing a password on a phone keyboard by letting them continue with an already-signed-in Google account.
• Returning customer convenience — let regular shoppers skip the login form entirely on repeat visits with Auto Sign-In for returning visitors.
• Membership and loyalty programs — capture more verified email sign-ups by lowering the friction of creating an account in the first place.
• Multi-store retailers — enable One Tap on some store views and not others, or tune sign-up behavior differently per store view, with no extra configuration overhead.