Google Login Error 403 Google Login Not Working? Don’t Reset Yet — Try This Fix Fast

Quick answer: Google login error 403 is usually fixed by allowing Google sign-in cookies, disabling blockers (extensions/AV web shields), and retrying on a clean network (no VPN/custom DNS/proxy).

If Google login is not working today, first rule out a Google outage, then follow the steps below in order—most people restore sign-in in under 10 minutes.

Quick Fix Checklist

• Try direct sign-in: open https://accounts.google.com/ in a new tab (not inside an app).
• Incognito/Private test: if it works there, your normal profile has a cookie/extension/policy issue.
• Turn off VPN + custom DNS (NextDNS/Pi-hole/AdGuard DNS) and retry once.
• Disable extensions (ad blockers, privacy tools, script blockers, password managers) and retry.
• Allow third-party cookies (or add exceptions) for Google sign-in domains.
• Switch networks: try a mobile hotspot to bypass corporate proxy/filtering.
• Check for an outage: Google Workspace Status Dashboard.

Causes (realistic, not generic)

• Cookies blocked or auto-deleted: strict tracking protection, “clear cookies on exit,” or third-party cookie blocking breaks Google Identity flows.
• Extension interference: ad/privacy/script blockers or password managers block requests to accounts.google.com, gstatic, or oauth endpoints.
• DNS/VPN/proxy filtering: NextDNS/Pi-hole/corporate proxies block auth/recaptcha endpoints or return a filtered 403.
• Google Workspace restrictions: admin blocks consumer sign-in, third-party OAuth apps, context-aware access, device compliance, or region access.
• OAuth misconfiguration (app-specific): wrong redirect URI, blocked scopes, unverified app, or Workspace app access control denies the flow.
• Stale session / clock / TLS inspection: corrupted Google session cookies, incorrect system time, or antivirus HTTPS inspection can trigger repeated 403 loops.

Step-by-Step Fix

1) Confirm it’s not a Google-side incident (2 minutes)

• Check Google Workspace Status for Identity / Google Account / Gmail incidents.
• If there’s an incident, wait. Repeated attempts can trigger temporary risk checks and make sign-in harder.

2) Do the fastest isolation test (Incognito + hotspot)

• Incognito works, normal mode fails: cookie/extension/policy issue in your main profile.
• Hotspot works, Wi‑Fi fails: DNS/proxy/firewall filtering on your network.
• Both fail everywhere: account restriction, device time/TLS inspection, or a broader issue.

3) Fix cookie and tracking settings (most common 403 cause)

Google sign-in can return 403 when identity cookies are blocked, partitioned, or deleted mid-flow.

Chrome / Edge (Chromium)

• Go to Settings > Privacy and security > Third-party cookies.
• Temporarily set to Allow third-party cookies, or add exceptions under Sites allowed to use third-party cookies.
• Add these common sign-in domains (use at least the first two):
  • accounts.google.com
  • [*.]google.com
  • [*.]gstatic.com
  • [*.]googleusercontent.com
  • oauth2.googleapis.com
• Also check: Settings > Privacy and security > Clear browsing data and ensure you are not auto-clearing cookies on exit.

Firefox

• Go to Settings > Privacy & Security.
• Under Enhanced Tracking Protection, switch from Strict to Standard temporarily.
• On accounts.google.com, click the shield icon and disable protection for that site if needed.

Safari (macOS/iOS)

• macOS: Safari > Settings > Privacy and temporarily disable Prevent cross-site tracking.
• Then: Safari > Settings > Privacy > Manage Website Data and remove data for google.com and accounts.google.com.

4) Advanced fix: Clear only Google Identity site data (stops 403 loops)

If you’re stuck in a 403 loop, clearing only Google sign-in storage is often enough (no full browser wipe).

Chrome / Edge

• Open: chrome://settings/siteData (Edge: edge://settings/siteData).
• Remove site data for:
  • accounts.google.com
  • google.com
  • apis.google.com
  • oauth2.googleapis.com
  • gstatic.com
• Close all Google tabs, quit the browser fully, reopen, then try accounts.google.com again.

5) Remove extension and security filtering that triggers 403

• Temporarily disable extensions that commonly break Google login:
  • uBlock / AdBlock / AdGuard browser extension
  • Privacy Badger / Ghostery
  • NoScript / script blockers
  • Password managers with page overlays (test by disabling)
• If you use antivirus web protection (Bitdefender, Kaspersky, Avast, ESET), temporarily disable HTTPS scanning / web shield and retry.
• If disabling fixes it, add allowlist rules for:
  • accounts.google.com
  • oauth2.googleapis.com
  • apis.google.com
  • www.gstatic.com

6) Fix VPN, DNS, proxy, and corporate filtering (common “today” failures)

• Turn off VPN and retry. Some exit IPs are rate-limited or flagged, resulting in 403.
• If you use custom DNS (NextDNS, Pi-hole, AdGuard DNS):
  • Temporarily switch DNS to 1.1.1.1 or 8.8.8.8 and retry.
  • Check DNS logs for blocks on gstatic, googleapis, oauth2, recaptcha.
  • Allowlist the blocked domains and retry.
• Work/school network: if hotspot works, your proxy/firewall is blocking Google Identity endpoints. You’ll need IT to allow them.

7) Non-obvious device fix: correct system time + restart network stack

Incorrect time can break secure sign-in tokens and look like a 403. Network stack issues can also cause repeated auth failures.

• Fix system time: enable automatic time/time zone, then reboot.
• Flush DNS cache:
  • Windows: run ipconfig /flushdns (Command Prompt as admin).
  • macOS: reboot, or flush DNS via Terminal if you’re comfortable.
• Restart router if multiple devices on the same network suddenly get Google login error 403 today.

8) If the 403 happens only inside an app or one website (OAuth-specific)

If direct sign-in works but “Sign in with Google” fails on one service, it’s usually OAuth configuration or Workspace app access control.

• Test direct sign-in at accounts.google.com. If that works, the issue is likely app-specific.
• Google Workspace users: ask your admin to check:
  • Admin Console > Security > Access and data control > API controls > App access control
  • Whether the app is Blocked or Limited
  • Context-aware access / device compliance rules that can deny sign-in
• Developers/site owners: in Google Cloud Console verify:
  • OAuth consent screen: publishing status, test users, verification, and whether the app is in testing mode
  • Credentials > OAuth 2.0 Client IDs: Authorized redirect URIs match exactly (scheme/host/path; watch trailing slashes)
  • Correct client type (Web vs Android/iOS) and correct package/bundle IDs where applicable

Still Not Working

• Get the exact failure point:
  • Does 403 happen on accounts.google.com (Google-side sign-in) or after redirect back to the app (OAuth/app-side)?
  • Copy the full URL and any request ID/error text shown on the 403 page.
• Try a clean browser profile (best “no guesswork” test):
  • Chrome: Settings > You and Google > Add new profile (install no extensions), then try sign-in.
  • If the new profile works, your main profile has a cookie/extension/policy conflict.
• Check managed device/browser policies (common on work PCs):
  • Chrome: open chrome://policy and look for policies affecting cookies, sign-in, proxies, or extensions.
  • If policies exist, you may not be able to fix it locally—IT must change the policy.
• Rule out TLS inspection / captive portals:
  • On public Wi‑Fi, open any non-HTTPS site to trigger the captive portal login, then retry Google sign-in.
  • On corporate devices, HTTPS inspection can break auth. Test on hotspot + personal device to confirm.
• Account edge cases:
  • Family Link/supervised accounts can be blocked from certain OAuth flows—test with a non-supervised account.
  • If you’re traveling or using a foreign VPN exit, disable it and retry from your normal region/IP.
• Last-resort resets (do these only if needed):
  • Update the browser to the latest version, then reboot.
  • Reset browser settings (Chrome: Settings > Reset settings) if a hidden setting keeps re-breaking sign-in.
  • Reinstall the browser if profiles consistently fail and policies are not present.
• Escalate with the right evidence:
  • Workspace users: send admin the failing URL, time, whether Incognito/hotspot worked, and your device/browser.
  • OAuth/app issue: send the app owner the exact redirect URI used and a screenshot of the 403 page.

If you share (1) browser + version, (2) whether Incognito works, (3) whether hotspot works, and (4) where the 403 appears (accounts.google.com vs a specific app), you can pinpoint the cause quickly.

How to Check for a Temporary Outage

Before changing device settings, confirm that the problem is not caused by a temporary outage.

Why this happens

Service interruptions can make normal accounts, apps, and networks appear broken even when nothing is wrong locally.

How to fix it

1. Try the web version to see whether the same action fails outside the app.
2. Check official status pages or recent outage discussions if available.
3. Avoid repeated retries if the platform appears unstable.
4. Wait a few minutes and test again from the same trusted network.

Important notes

• If both the app and browser fail in the same way, the issue is much more likely to be service-side.
• Changing passwords or reinstalling apps will not help during a real outage.

Frequently Asked Questions