Log In
Dreamwalk uses Battle.net's OAuth 2.0 Authorization Code Flow to log you in and verify your characters belong to you. You can read more about it in the Battle.net developer documentation .
OAuth 2.0 is a specification for a method of authorizing third-party applications to access limited resources on behalf of user accounts on a website. It is a very popular method for connecting websites together. You've probably seen it used on popular websites. If you've ever seen a button that says something like 'Log in with Google', 'Log in with Facebook', or 'Connect your Twitch account', that's probably using OAuth 2.0.
When you click the 'Log In With Battle.net' button, Dreamwalk will redirect you to Battle.net. If you aren't already logged in on Battle.net, you will be asked to do so. You will then be asked if Dreamwalk is allowed permission to see some information about your WoW account. This permission is read-only (Dreamwalk cannot modify anything on your Battle.net account). Finally, you will be redirected back to Dreamwalk with an authorization code. This code is used by Dreamwalk to identify you and see which characters belong to you. We store this code encrypted at rest in our database and it expires after a short time. Keep in mind that this code is not your password! It only allows Dreamwalk to read limited information about your account (eg. your battle tag and your characters).
Yes, it is safe. Dreamwalk will never see your Battle.net password and will never ask for it. Dreamwalk will redirect you to Battle.net to ask you for permission to see your characters. In fact, if you are already logged in to Battle.net, Battle.net will not prompt you for your password.
If you want to be super safe, we recommend you navigate to Battle.net directly and login there first before trying to log in on Dreamwalk. If you are already logged in on Battle.net, you will not be asked for your password after being redirected to Battle.net.
This login method means you don't need to create an account for Dreamwalk. We use the authentication service provided by Battle.net to identify you. If you have MFA enabled on your Battle.net account (which we highly recommend), you will get that extra security for free as well.
You can go to your Battle.net account under Authorized Applications to revoke the permissions you've given to Dreamwalk.