OAuth is the standard that powers secure logins, including sign-in with Google and API authorizations, without your app ever seeing passwords it should not hold. Login is the front door to everything your users trust you with; it is the wrong place to improvise.
Have a question specific to your product?
Share the context and I will reply with a practical next step.