What an OAuth authorization actually is
When you approve a third-party app through Discord’s OAuth flow, you grant that app a set of permissions tied to your account. That is different from a Connection badge, which is a public profile link to another service. An authorization is a live access grant; a Connection is a display element. The audit question is not “does this badge look familiar?” but “did I grant this app access, and do I still want it?”
Review each app before you remove it
Work through your Authorized Apps list one entry at a time. Use this decision table to sort what you find:
| What you see | What to check | Decision |
|---|---|---|
| App name you recognize | Purpose matches what you used it for | Keep if still needed |
| App name you do not recognize | Purpose and permissions are unclear | Deauthorize |
| App you used once | No ongoing need | Deauthorize |
| App with broad permissions | Whether those permissions match its purpose | Deauthorize if mismatched |
| App you suspect is malicious | Any unexpected access | Deauthorize, then follow official support guidance |
Discord recommends reviewing Authorized Apps and removing unwanted applications with account access.
Discord recommends reviewing Authorized Apps and removing unwanted applications with account access. Source
Self-review checklist
- List every authorized app and write down its stated purpose.
- Compare permissions against that purpose; broad access on a simple app is a mismatch worth removing.
- Remove apps you no longer use, even harmless ones.
- After removal, check whether the app still appears in your list; if it does, treat that as unresolved.
- If you believe your account was compromised, contact Discord through official support channels rather than replying to anyone who messages you in-app.
Discord says its staff will not contact users directly through the Discord app about support matters.
Discord says its staff will not contact users directly through the Discord app about support matters. Source
What deauthorizing does and does not do
Deauthorizing revokes the app’s access grant; it does not delete your Discord account, and it does not remove public profile elements such as Connections. It also does not guarantee recovery if an account was already compromised. Treat removal as one step in a broader audit, not a fix-all.
If your audit is part of a wider cleanup, see our guide to finding forgotten online accounts. To understand how we source and review claims, read our methodology.
A natural next step is to review your own known public handles with TraceSeek, which checks 3,000+ platforms in a 20-30 second scan with a free first scan. TraceSeek does not change platform settings, does not see private information, and does not verify a person’s identity; public matches are leads, not proof of ownership.
Key facts
- Discord recommends reviewing Authorized Apps and removing unwanted applications with account access.
- Discord says its staff will not contact users directly through the Discord app about support matters.
- An OAuth authorization grants an app account access, while a Connection is a public profile badge.
- Deauthorizing an app revokes its access grant but does not delete your Discord account.
- TraceSeek checks 3,000+ platforms in a 20-30 second scan with a free first scan.