Remove This Application Was Created By A Google Apps Script User May 2026
Before attempting to remove the message, you must understand its cause. The warning appears when a Google Apps Script application attempts to access sensitive user data (like Drive, Gmail, Sheets, or Contacts) or perform actions on behalf of a user without completing Google’s verification process.
Specifically, the message triggers when:
In essence, Google is saying: “We don’t know who built this. Be careful.”
For internal company tools (users in the same domain), this message is sometimes less severe, but for external users, it is a major red flag.
This method removes the visible footer by masking the GAS URL behind your own domain using a reverse proxy.
How it works:
Example NGINX configuration:
location /
proxy_pass https://script.google.com/macros/s/AKfycb.../exec;
proxy_set_header Host script.google.com;
sub_filter '<div class="footer-branding">' '</div><!-- removed -->';
sub_filter_once off;
proxy_ssl_server_name on;
Advantages:
Disadvantages:
❌ Deleting the line from appsscript.json
❌ Changing oauthScopes to empty
❌ Using ScriptApp.getProjectTriggers() tricks
❌ Deploying as “Execute as me” without sharing
These do not remove the warning.
The message "This application was created by a Google Apps Script user" is a mandatory security banner added by Google to identify scripts not created by Google itself. While you cannot directly delete this text from the script's code, you can bypass it using several development strategies:
Embed as an iFrame: The most common workaround is embedding your Apps Script web app into another website using an tag. When viewed through the parent site, the banner is typically hidden.
Use a Google Workspace Account: If you run the script within a Google Workspace (business or education) domain, the banner will not show for other users within that same domain.
Publish as an Add-on: Converting your script into a verified Google Workspace Add-on removes the banner, as the application becomes a "verified publisher". This requires a more intensive development and verification process.
Google Sites Integration: Embedding the web app directly into a Google Site in Full View mode can also suppress the warning message. Alternative Hosting
If the banner is a dealbreaker for your user interface, consider migrating your front-end (HTML/CSS/JS) to a standalone hosting service and using the Google Apps Script API or a backend service to interact with Google data. If you'd like to try the iFrame method, Is there any way to remove the banner? : r/GoogleAppsScript
There is no direct "off" switch to remove the "This application was created by a Google Apps Script user" banner from a standard web app, as it is a built-in security measure by Google
. However, you can bypass or hide it using several workarounds depending on your environment. 1. Embed the Web App in an Iframe
The most common way to hide the banner is to host your own HTML page (on GitHub Pages, for example) and embed the Apps Script web app URL inside an "YOUR_WEB_APP_URL" "width:100%; height:100vh; border:none;" Use code with caution. Copied to clipboard : Ensure your script allows iframing by setting the XFrameOptionsMode javascript HtmlService.createHtmlOutputFromFile(
) .setXFrameOptionsMode(HtmlService.XFrameOptionsMode.ALLOWALL); } Use code with caution. Copied to clipboard 2. Publish as a Workspace Add-on If you publish your script as a verified Google Workspace Add-on
, the warning banner typically does not appear. This requires more development work and often a verified Google Cloud project, but it is the "official" way to remove such warnings for professional applications. 3. Use within the Same Workspace Domain
If you are part of a Google Workspace organization, the banner is
to other users within the same domain. If your intended audience is internal to your company or school, simply deploying it to your organization will solve the issue. 4. Client-Side Browser Extensions (For Personal Use)
If you only want to hide the banner for yourself, you can use browser extensions like uBlock Origin
or a custom CSS injector to set the warning element's display to CSS Selector #warning display: none !important; GitHub Pages site to host the iframe for your application? AI responses may include mistakes. Learn more
To remove the "This application was created by a Google Apps Script user" banner, you generally need to change how you host or verify the application
. Google displays this message as a security feature to inform users that the app is not an official Google product and was created by a third party. Methods to Remove or Bypass the Warning
The most effective way to eliminate this banner is to avoid viewing the app directly via the script.google.com Embed in a Website or Google Sites If you embed your Web App into another webpage using an
, the banner is often suppressed. For this to work, you must set the X-Frame-Options in your Apps Script code to allow embedding: javascript HtmlService.createHtmlOutputFromFile(
) .setXFrameOptionsMode(HtmlService.XFrameOptionsMode.ALLOWALL); } Use code with caution. Copied to clipboard Google Workspace Verification
The banner typically does not appear for users within the same Google Workspace domain
as the script owner. If you are targeting external users, you must publish the script as a verified Google Workspace Add-on or associate it with a verified Google Cloud project Browser Extensions (Developer Workaround)
If you only need the banner gone for your own view (e.g., on a public display or TV), you can use browser extensions like "Custom JavaScript for websites" to inject CSS and hide the element. CSS to hide #warning display: none; Google Groups Why the Banner is There Security & Transparency
: It warns users that the app's creator is an individual user, not Google, preventing phishing or malicious data collection. Mobile Responsiveness Issues
: As of late 2023, the banner transitioned to a blue format that can cause scaling issues on mobile devices. Summary of Solutions Complexity External users Workspace Domain Internal organization users GCP Project Verification Public/External users Browser Extension Only the local viewer to embed your script into a Google Sites
How to Remove the "This application was created by a Google Apps Script user" Header
If you have ever built a web app using Google Apps Script (GAS), you have likely encountered the persistent gray banner at the top of the page that reads: "This application was created by a Google Apps Script user."
While Google includes this for security and transparency—to ensure users know they aren't interacting with an official Google product—it can be a major eyesore for developers trying to create a professional, branded experience.
In this guide, we will explore the reality of this disclaimer and the best ways to work around it. Can You Directly Remove the Banner?
The short answer is no. There is no "off switch" in the Google Apps Script settings to hide this banner.
Because the web app is hosted on the ://google.com domain, Google injects this iframe header as a security measure to prevent phishing and spoofing. Even with a Google Workspace (formerly G Suite) Business or Enterprise account, the banner remains.
However, depending on your technical skills and how you intend to share the app, there are three primary workarounds. Method 1: Embedding the Web App in an Iframe
The most common way to "mask" the Apps Script environment is to embed your Google Apps Script URL into your own personal or business website.
Deploy your Script: In the Apps Script editor, click Deploy > New Deployment. Select Web App and set "Who has access" to Anyone. Copy the Web App URL: It will look like https://google.com.
Embed on your Site: Use the following HTML code on your own website:
Use code with caution. Before attempting to remove the message, you must
The Result: While the banner still technically exists inside the iframe, it stays contained within that frame. If you style your website correctly, the banner feels less like a "system warning" and more like a small footer or header element within a specific window. Method 2: Using a Custom Domain with a Proxy (Advanced)
If you want to completely strip the banner, you cannot host the app on Google’s servers directly. Instead, you can use a "proxy" or a middle-man server.
Using a service like Cloudflare Workers or a simple Node.js/Express server, you can fetch the HTML content from your Google Apps Script, strip out the Google-injected header tags, and serve the cleaned HTML on your own custom domain. Pros: Complete removal of the banner; professional URL.
Cons: Requires significant coding knowledge; may violate Google’s Terms of Service regarding masking the origin of the script.
Method 3: Switching to Google Cloud Run (The Professional Path)
If the "Created by a Google Apps Script user" banner is a dealbreaker for a professional project, it may be time to move beyond Apps Script.
Google Apps Script is designed for quick internal tools. For client-facing applications, developers often migrate their logic to Google Cloud Run or Firebase Hosting.
Cloud Run: Allows you to run code in any language (Python, Node.js, Go) without any forced headers.
No Disclaimers: Since you are hosting the environment, Google does not inject any security banners. Why Does Google Put It There?
It is important to remember why this exists. Google Apps Script allows anyone to write code that can access Google Drive, Gmail, and Calendar data. Without that banner, a malicious actor could easily build a fake "Google Login" page that looks identical to a real one. The banner serves as a "Proceed with Caution" sign for the end-user.
To summarize your options for dealing with the "This application was created by a Google Apps Script user" message:
Accept it: For internal company tools, it is rarely an issue. In essence, Google is saying: “We don’t know
Iframe it: Embed it into your own site to make it feel like part of a larger dashboard.
Migrate: If branding is paramount, move your project to a dedicated hosting platform like Firebase or Vercel.
By understanding these limitations, you can better plan your project's user experience from the start.
Here are concise, useful review suggestions you can use for "remove this application was created by a google apps script user":
Outcome (single sentence): state the result and any residual issues. Example: "Banner gone across all users; no other UI changes observed."
Troubleshooting tips (2–3 bullets): common pitfalls and fixes.
Rating (optional, short): give a quick verdict. Example: "4/5 — effective solution; could use clearer instructions on manifest edits."
Use or adapt any of the lines above to fit your exact experience.
To remove the "This application was created by a Google Apps Script user" banner, you generally need to embed your web app in an iframe on another site, or use a Google Workspace (paid) account to deploy it within your own domain.
How to Remove the "Created by a Google Apps Script User" Banner
If you’ve ever built a web app with Google Apps Script, you’ve likely seen that persistent blue or gray banner at the top of your page. While it serves as a security feature for Google, it can make your professional project look like a "test script." Here is the reality of how to handle it. 1. The "Free" Workaround: Use an iFrame
The most common way to hide the banner without spending money is to embed your Apps Script web app into another website using an How it works: This method removes the visible footer by masking
When the script is rendered inside an iframe on an external site, the banner is typically suppressed. You must update your script’s function to allow embedding: javascript HtmlService.createHtmlOutputFromFile(
) .setXFrameOptionsMode(HtmlService.XFrameOptionsMode.ALLOWALL); } Use code with caution. Copied to clipboard Users have reported success embedding these apps into Google Sites , which often removes the warning for viewers. 2. The Professional Solution: Google Workspace
The banner is a "price" of using the free consumer platform. If you use a paid Google Workspace
account (Business or Education), you can deploy apps that don't show this warning to other users in your same domain. Internal Access:
When you deploy and set access to "Anyone within [Your Domain]," the banner is removed for your colleagues. Verification:
For apps intended for the general public, you must link your script to a standard Google Cloud Project (GCP) and go through the OAuth verification process to be recognized as a "verified publisher". 3. What Doesn't Work
It is important to note that you cannot hide this banner using internal CSS or JavaScript within your script. Google intentionally isolates the web app in a different domain (e.g., googleusercontent.com
) to prevent your code from accessing the parent page's elements, including the banner itself. Summary Table: Removal Options Difficulty iFrame Embedding Hides banner on the host site Google Sites Often suppresses banner for viewers Workspace (Internal) No banner for users in your domain GCP Verification Removes banner for public users linking to a GCP project Google Apps Script remove warning banner - Stack Overflow
The banner "This application was created by a Google Apps Script user" is a built-in security disclaimer designed by Google to warn users that the application has not been verified by Google and may be untrustworthy. Direct Solutions
There is no single "off" switch in the script settings, but you can remove or hide it using these methods:
Embed in Google Sites: The most reliable official method is to embed your web app URL into a Google Site. When viewed through the Google Sites interface, the banner is typically suppressed.
Self-Hosting via Iframe: You can host a simple HTML file on your own domain (e.g., via GitHub Pages) and embed the Apps Script URL within an . While the banner may still technically exist within the frame, it is isolated from your main site's branding.
Google Workspace Accounts: For internal apps, the banner is often not shown to users who are part of the same Google Workspace domain as the script owner. Why the Banner Exists
Security & Phishing Prevention: Google uses this banner to prevent malicious actors from creating fake login pages or data-collection forms that look like official Google products.
Verification Status: The banner appears for scripts that have not undergone the formal Google Workspace Add-on verification process. Even with a verified brand, simple web apps may still trigger it if they are not published as official Add-ons. Limitations and Technical Challenges
CSS/JavaScript Blocking: You cannot hide the banner by adding CSS like display: none directly to your Apps Script HTML file. Google hosts the banner in a parent frame with a different origin, and browser security policies (Same-Origin Policy) prevent your script from interacting with or hiding elements in that parent frame.
Browser Extensions: While browser extensions can hide the banner locally for a specific user, this will not remove it for external clients or visitors to your web app. Executive Recommendation For a professional, "white-label" experience:
Use a Google Workspace Business or Education account to host the script for internal users.
For public-facing apps, embed the script into a parent website or Google Site to mask the standard Apps Script header.
Ensure your script is associated with a Standard Google Cloud Project rather than a default project to improve brand credibility.
Are you building this app for internal team use or for external clients?
Once verified: