Is It Safe to Connect Your Discogs Account to discdogs?

Updated

Yes, based on how discdogs describes its integration. discdogs states it is a registered Discogs application that connects through the official Discogs OAuth API, and that it never sees or stores your Discogs credentials. You can also revoke access at any time. The main caveat is that these are the service's own claims, so if you want independent verification, review the Discogs application listing and discdogs' FAQ before connecting.

What discdogs says about the connection

The relevant points from discdogs' own documentation:

  • Registered Discogs application. discdogs says it is a registered Discogs app, which is why it can appear as an authorized connection on your Discogs account.
  • Official Discogs OAuth API. The login flow uses Discogs' OAuth, meaning you authorize discdogs through Discogs rather than handing over a password.
  • No credential storage. discdogs states it never sees or stores your Discogs credentials.
  • Revocable access. You can revoke discdogs' access at any time.
  • More detail in the FAQ. discdogs points to its FAQ for additional privacy information.

Why OAuth matters here

OAuth is the key mechanism. Instead of giving discdogs your Discogs username and password, you approve a scoped connection inside Discogs. Discogs issues an access token to the application, and that token is what discdogs uses to read your wantlist and scan the marketplace.

Two practical consequences follow:

  1. Your password stays with Discogs. discdogs does not need it, and per its documentation does not receive or store it.
  2. Revoking is a Discogs-side action. Because the authorization lives on your Discogs account, you can cut discdogs off without changing your password.

For example, if you stop using discdogs, revoking its access should stop it from reading your wantlist going forward — you don't have to delete your Discogs account or rotate your password to end the connection.

What discdogs can access

The documented purpose is narrow: it imports or reads your Discogs wantlist and scans the Discogs marketplace for matching listings, then alerts you by email or Telegram.

Aspect What discdogs documents
Login method Discogs OAuth (official API)
Credentials Never seen or stored, per discdogs
Data used Your Discogs wantlist, to match marketplace listings
Alerts Email or Telegram
Access control Revocable at any time
Further detail discdogs FAQ

The Web App imports your wantlist automatically. The Chrome Extension works differently: it layers extra columns and controls on top of your existing Discogs wantlist pages rather than importing a copy.

How to connect and stay in control

  1. Start the login from discdogs. Choose "Sign in with Discogs" (or install the Chrome Extension and connect from there).
  2. Authorize on Discogs. You'll be asked to approve discdogs' access through Discogs' OAuth flow. Confirm the app name matches discdogs before approving.
  3. Verify the connection. After authorizing, your wantlist should import (Web App) or show the added columns and controls (Extension). If nothing appears, the authorization likely didn't complete.
  4. Review or revoke later. Check your connected applications in your Discogs account settings to confirm discdogs is listed, and revoke it there if you want to disconnect.

Reasonable cautions

  • Treat the privacy claims as claims. discdogs' statements about not storing credentials are the service's own; the FAQ is where it says more detail lives. If that matters to you, read it before connecting.
  • Revoking stops future access, not past alerts. Disconnecting ends discdogs' ability to read your wantlist going forward; it doesn't retract alerts already sent.
  • Check the app identity during authorization. The safety of OAuth depends on approving the right application. Confirm you're authorizing discdogs and not an unfamiliar app.

If you're comfortable authorizing a registered Discogs application through OAuth and want wantlist alerts, connecting is a low-friction step you can undo from your Discogs account. If you'd rather not grant any third-party access to your wantlist, the Chrome Extension still requires a connection, so neither option avoids authorization entirely.