Sign in with Google and Google One Tap, with verified tokens and safe account matching.
Tested on 2 buildsUpdated Nov 3, 2026Version 1.0.0CS-Cart, Multi-Vendor 4.17.2 – 4.21.x No core file edits
Built for
Google Login & One Tap: Continue with Google and Google One Tap with verified ID tokens and safe account matching1 of 7
What it does
Google Login & One Tap adds a Continue with Google button to the sign-in pop-up, sign-in page, checkout and registration page, and the Google One Tap prompt that signs returning shoppers in from any page. Customers see their connected Google account in the profile; marketplace vendors can sign in to the vendor panel with Google. It is the Google part of Social Login Pro as a separate add-on, for stores that need only Google.
How it works
Create an OAuth client in the Google Cloud Console, paste the client ID and secret on Customers, Google sign-in and switch it on; the page shows the redirect URI and the steps. Customers click the button or accept One Tap and come back signed in. A confirmed Google address of an existing customer connects to that account; otherwise the password is asked once. Security: code flow with state, nonce and PKCE, verified ID tokens, browser binding and encrypted secrets.
Features
Continue with Google button in the sign-in pop-up, sign-in page, checkout and registration page
Google One Tap with optional automatic sign-in for returning customers
Verified Google ID tokens (signature, issuer, audience, expiry, nonce) and PKCE
Safe account matching: confirmed e-mail, or the account password asked once
Connected Google account in the customer profile, with disconnect
Vendor panel sign-in with Google (Multi-Vendor)
Statistics: sign-ins, new accounts, One Tap share and failure reasons
Import of the Google keys and connections of the built-in Social login
Button style, shape and position settings in brand colours
Moves up to Social Login Pro without reconnecting customers (keys and connections are imported)
Full page cache friendly; CS-Cart, CS-Cart Ultimate and Multi-Vendor, 4.17.2 to 4.21
What you get
Package
kv_google_login-1.0.0.zip, installed through Add-ons → Manage add-ons
Updates & support
12 months included. Download new versions from your account and install them in Add-ons → Manage add-ons or the Upgrade Center.
License
1 production installation. Staging, dev and localhost are free and unlimited. The add-on keeps working after the update period ends. How licensing works
Compatibility
We list only the builds we install and test on. “Tested” means the full test plan was run on that build; “Supported” means the build is inside the supported range and uses the same hooks.
CS-Cart version and edition compatibility
CS-Cart version
CS-Cart
CS-Cart Ultimate
Multi-Vendor
Multi-Vendor Ultimate
4.22 and later
Testing next
Testing next
Testing next
Testing next
4.21.2
Supported
Supported
Supported
Supported
4.20.x
Supported
Supported
Supported
Supported
4.19.x
Supported
Supported
Supported
Supported
4.18.x
Supported
Supported
Supported
Supported
4.17.2
Supported
Supported
Supported
Supported
Before 4.17.2
Not supported
Not supported
Not supported
Not supported
Requirements
Core changes
None. Hooks and template overrides only
1.0.0
Nov 3, 2026
Latest
Added 5
Sign-in and registration with Google in the sign-in pop-up, sign-in page, checkout and registration page.
Google One Tap with optional automatic sign-in.
Safe account matching (confirmed e-mail or the account password once), connected accounts in the profile, vendor panel sign-in (Multi-Vendor) and statistics.
Steps inactive while Social Login Pro is active (no double buttons); Social Login Pro imports the keys and connected accounts.
Domain-bound license check and self-healing upgrades.
Does it replace the built-in Social login?
It can run next to it. The built-in add-on has a Google, Facebook, X and Telegram button; this add-on adds Google with verified tokens and safe account matching, and Google One Tap.
Can someone take over an existing account with a Google profile?
No. An account is connected automatically only when Google confirms the address; otherwise the account password is asked once.
I need more providers later.
Need more providers? Social Login Pro adds Google, Apple, Microsoft, Facebook, Amazon, LinkedIn, Discord, Yandex ID and OpenID Connect; the Login Pack adds two-factor sign-in, passkeys and phone codes. Both import the keys and connected accounts of this add-on. Install Social Login Pro, click Import on its Social sign-in page, then uninstall this add-on.
Does it work with full page cache?
Yes. The button markup is the same for every visitor.