# 创建 OAuth 应用
你可以在你的个人帐户下或在你有管理权限的任何组织下创建和注册 OAuth app。 创建 OAuth app 时，请记住仅使用你认为公开的信息来保护你的隐私。
> \[!NOTE]
> Consider building a GitHub App instead of an OAuth app.
>
> Both OAuth apps and GitHub Apps use OAuth 2.0.
>
> OAuth apps can only act on behalf of a user while GitHub Apps can either act on behalf of a user or independently of a user.
>
> GitHub Apps use fine-grained permissions, give the user more control over which repositories the app can access, and use short-lived tokens.
>
> For more information, see [Differences between GitHub Apps and OAuth apps](/en/enterprise-cloud@latest/apps/oauth-apps/building-oauth-apps/differences-between-github-apps-and-oauth-apps) and [About creating GitHub Apps](/en/enterprise-cloud@latest/apps/creating-github-apps/about-creating-github-apps/about-creating-github-apps).
> \[!NOTE]
> A user or organization can own up to 100 OAuth apps.
1. In the upper-right corner of any page on GitHub, click your profile picture, then click ** Settings**.
2. In the left sidebar, click ** Developer settings**.
3. In the left sidebar, click **OAuth apps**.
4. Click **New OAuth App**.
> \[!NOTE]
> If you haven't created an app before, this button will say, **Register a new application**.
5. In "Application name", type the name of your app.
> \[!WARNING]
> Only use information in your OAuth app that you consider public. Avoid using sensitive data, such as internal URLs, when creating an OAuth app.
6. In "Homepage URL", type the full URL to your app's website.
7. Optionally, in "Application description", type a description of your app that users will see.
8. In "Authorization callback URL", type the callback URL of your app.
You can enter up to 10 callback URLs. To add additional callback URLs, click **Add callback URL**.
9. If your OAuth app will use the device flow to identify and authorize users, click **Enable Device Flow**. For more information about the device flow, see [Authorizing OAuth apps](/en/enterprise-cloud@latest/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps#device-flow).
10. **Expire user access tokens** is enabled by default. If your app's authentication code hasn't been updated to support short-lived tokens, uncheck the box until support is added. For more information about expiring tokens, see [Authorizing OAuth apps](/en/enterprise-cloud@latest/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps#expiring-access-tokens).
11. Click **Register application**.
## Further reading
* [Modifying an OAuth app](/en/enterprise-cloud@latest/apps/oauth-apps/maintaining-oauth-apps/modifying-an-oauth-app)