Can RBX Invest steal my Robux or items?

No. The token Roblox issues to RBX Invest is read-only. It carries no permission to spend Robux, list or sell items, trade, or modify your account in any way - and Roblox enforces those limits on its servers, not us. The token's only powers are confirming your identity, reading your public profile name, and reading your inventory list.

Does RBX Invest see my Roblox password?

No, never. You type your password only on Roblox's own website (apis.roblox.com / roblox.com), and it never leaves Roblox's servers. RBX Invest receives a limited token after you approve the consent screen. If you're already signed in to Roblox in your browser, you won't type a password at all.

How do I disconnect RBX Invest from my Roblox account?

Log in on the Roblox website, open account Settings, and go to the App Permissions section. Find RBX Invest in the list of connected apps and remove it. The token is invalidated, inventory syncing stops immediately, and nothing on your Roblox account changes. You can reconnect any time.

Is OAuth the same as giving someone my account?

No - it's closer to the opposite. Giving someone your account means sharing a password that unlocks everything: Robux, trades, settings, chat. OAuth shares a token limited to the exact permissions on the consent screen, which for RBX Invest is identity plus a read-only inventory view. The token can't be used to log in to Roblox as you, and you can revoke it in seconds without changing your password.

What Is OAuth? How 'Continue with Roblox' Keeps You Safe

What OAuth is, how Continue with Roblox works, and why RBX Invest never sees your password: read-only inventory access you can revoke anytime.