Why Plugio only uses official APIs (and never asks for your password)

Many creator tools start with a shortcut: ask for your Instagram or YouTube password and log in as you. It works, and it's quick to build. We chose not to do that. This is why, and what it costs us.

What we do instead

When you click Connect, you are sent to a login screen hosted by Google or Meta. You choose which account to connect and approve what Plugio may do. Plugio never sees your password. You can disconnect any channel from inside Plugio, or revoke access from your Google or Meta settings.

Why we think this is right

• Your login stays yours. A tool that holds your password can be a way into your account if it is ever breached.
• It follows the platforms' rules. Google and Meta provide official routes for third-party tools. Using them means we are doing what the platforms allow.
• You stay in control. Access you granted can be taken back in one place, without asking us.

What it costs us

Official APIs are narrower than a script that clicks around as you. That is the point, but it has consequences you should know about:

• Instagram publishing and messaging need a Professional (Business or Creator) account linked to a Facebook Page.
• YouTube allows public replies only, with no DMs.
• We support YouTube, Instagram and Facebook today. TikTok isn't supported today.
• New features can take longer, because each one has to fit what the platforms allow.

If you want the practical version for DMs, read how to do Instagram DM automation safely.