← Back to glossary

A safety feature that makes OAuth logins harder to intercept.

Definition

PKCE is a security add‑on for OAuth login flows that helps prevent someone from stealing the login code.

In plain English A safety feature that makes OAuth logins harder to intercept.

Why this matters

Why it matters: It protects OAuth logins on mobile and public clients where secrets are harder to keep.

Example

Example: A mobile app uses PKCE when connecting to a Google account.