shortscheck your own page

tiktok · in-app browser

TikTok browser sign in

Every link opened in TikTok renders in TikTok’s own browser. Google refuses to sign anyone in there.

TikTok makes this worse than the other apps in one specific way. It is the one with no button for opening the page in a real browser.

So the advice everyone gives, tell the visitor to open it in Safari, has nothing for them to tap.

what Google returns inside TikTok

Authorization Error Error 403 disallowed_useragent Google can't sign you in safely inside this app. You can use Google sign-in by visiting this app's website in a browser like Safari or Chrome.

reported verbatim on Stack Overflow, question 61980385

Note the last sentence. Google tells the visitor to use Safari or Chrome, inside an app that gives them no way to.

the missing button

In August 2022 Felix Krause tested what a set of iOS apps do to pages opened in their in-app browsers, and whether each offers a way out.

every app besides TikTok offered a way to [open the current website in your default browser].
Felix Krause, announcing InAppBrowser.com, August 2022

He is explicit about TikTok in particular: “in some cases (like TikTok), there is no button to open the currently shown page in the default browser.”

The same research recorded what TikTok’s browser was doing to pages it opened, which is also why Google refuses embedded browsers in the first place.

TikTok iOS subscribes to every keystroke (text inputs) happening on third party websites rendered inside the TikTok app… from a technical perspective, this is the equivalent of installing a keylogger on third party websites.
Felix Krause, same post

TikTok’s response, given to Forbes, was that the code exists for a different purpose.

the Javascript code in question is used only for debugging, troubleshooting and performance monitoring of that experience.
TikTok spokesperson Maureen Shanahan, to Forbes, August 2022

Two honest caveats. That research is from August 2022 and TikTok may have changed since. And we found no TikTok help page documenting the link behaviour either way.

What has not changed is the part that costs you signups. Google will not authenticate in an embedded browser, and the visitor is in one.

way out of the in-app browser, as tested in august 2022

  • TikTokno open-in-browser button found
  • Instagram, Facebook, Messengeran open-in-browser option exists, three taps deep
  • a shorts linkno menu needed; the escape happens on the tap

detecting the browser

If you want to log how much of your traffic lands here, TikTok’s browser identifies itself in the user-agent. Detection is diagnosis, not treatment.

tokens reported in a real TikTok in-app browser user-agent
  • BytedanceWebview/<hash>
  • AppName/musical_ly
  • musical_ly_<build>
  • ByteLocale/en · ByteFullLocale/en

musical_ly is TikTok’s legacy app identifier. The full string was captured on an Android device and posted to the ua-parser issue tracker.

Treat these as signals, not a contract. User-agent strings change without notice, and matching on them is why the spoofing workarounds died.

What detection buys you is an honest number: the share of your social traffic whose sign-in cannot work. It cannot make that traffic convert.

what does not work

  • telling the visitor to open the page in Safari

    The standard advice, and the one thing TikTok does not offer. Research in 2022 found no open-in-browser button in the app at all.

  • spoofing or matching the user-agent to get past Google

    Google reads more than the string now. The top-voted answers recommending this are from 2016 to 2019 and their own comment threads say it stopped working.

  • window.open to a custom scheme on page load

    Reported as not working from inside the embedded browser, and Chrome's documentation says a script with no tap behind it cannot launch another app.

  • switching the popup flow to a redirect flow

    Worth doing for single-tab browsers generally. Google answers the redirect from TikTok's browser with the same refusal.

  • hiding the Google button for TikTok traffic

    Honest damage control. It stops a broken button being shown and removes the sign-in method the visitor wanted.

what works

Only one fix applies to traffic from TikTok, because the browser is not yours and cannot be exited from inside.

the tap is the gesture

escape at the link, not on the page

A link that resolves on a server acts at the moment of the tap, which is the one real user gesture available, and hands the destination to Chrome or Safari.

Your page then loads in the browser holding the visitor’s Google session and saved passwords, and sign-in behaves normally.

if your own app embeds a browser

use the platform's browser component

Separate case, and Google documents it: Android Custom Tabs instead of WebView, SFSafariViewController instead of WKWebView.

This does nothing for taps from TikTok. You do not own that browser.

Plainly: the first fix is what shorts is. We built it for our own links, and this page is accurate whether or not you use it.

Build it yourself if you prefer. The parts are a server-side redirect, per-platform escape handling, and somewhere to count the taps by source app.

does your own signup page have this problem

Paste your signup or login page. We read it once and name every sign-in button that cannot complete inside an in-app browser. No account.

we read the page once and tell you what breaks. free, no account, nothing stored about you.

We read the signup pages of well-known products the same way, and most offer a sign-in that cannot complete there. That is the report.

A shorts link does the escape and counts every tap by source app. free keeps 5 links and 30 days of taps. shorts Lifetime is $49 once, with nothing recurring.

sources

Every claim above comes from one of these. The dates matter on this page.

written 26 Aug 2026 · corrections to shorts@nanocorp.app

Not found, and so not claimed here: any verbatim TikTok-specific error for Apple or Facebook sign-in, and any TikTok help page on link handling.

short answers

Why will Google not sign anyone in inside TikTok?
TikTok opens your link in a browser it embeds in its own app, and Google refuses OAuth in any embedded browser.
What exactly does the error say inside TikTok?
Authorization Error, Error 403 disallowed_useragent, then that Google cannot sign you in safely inside this app and to visit the site in Safari or Chrome.
Can the visitor open my page in their real browser?
TikTok is the one app documented as shipping no open-in-browser button. Research in 2022 found every other app offered one and TikTok did not.
How do I detect TikTok's browser server-side?
Its user-agent carries BytedanceWebview, AppName/musical_ly and ByteLocale tokens. Detection tells you the tap is doomed; it does not save it.
Is TikTok reading what my visitors type on my page?
Research published in 2022 found TikTok injecting script that subscribed to every keystroke and tap. TikTok said the code exists but is used only for debugging.
So what fixes it?
The link has to leave TikTok's browser at the moment of the tap, before your page and its sign-in buttons load.

the other answers

Same mechanism, different app. Each page is sourced separately.

All of them are listed on the answers page.