How to stop web browser offering to sign into Google account This question seems to be all over various forms, but i haven't yet found an answer.

On my Android phone, the stock web browser offers to sign in to my Google account when i visit Google websites. At the top of the screen appears a yellow pop-up listing all my Google account in a drop-down, and two buttons: "hide" and "sign in". Simply selecting an account and tapping "sign in" gives unchallenged access to my account via the web; no password is required.

This bothers me, since any malicious person who picks up my phone when I'm not looking can access my email, Google Drive, etc without knowing my password.

Let's assume that my screen-lock hasn't had time to kick in.... or we could assume it's easy to circumvent.

Enabling 2-stage sign in wouldn't help, since if someone has unauthorised access to my phone, they's receive the one-time token.

I've tried looking through all phone and browser settings to no avail. I've hunted through Google Dashboard, and cannot see how to disable this. I've signed out, but the yellow pop-up always appears, always giving unchallenged access.

An app-lock app might be an option, but is inconvenient, especially since friends often use each other's mobile browsers.

Installing a different browser may be an option, although again that's inconvenient, and would mean disabling the stock browser, which my come with other issues.

I'd really like to disable the yellow pop-up permanently, but i cannot seem to find out how to do this. Apologies if this has been answered already.

I'm running Android 4.0.4 Cyanogen mod 9.1.0 on a rooted Samsung Galaxy S GT-i9000.



I'm specifically looking for a way to prevent the yellow authentication pop-up in the stock web browser. I'm not bothered about other apps. I'm also not really bothered about why Google has chosen to do this. The lock screen isn't an issue either.

One scenario might be: an acquaintance asks to borrow my phone to use the web browser. Being a little cheeky, they go to Google and sign in, without a password being required. I wish to prevent this. If they were using a web browser on my laptop, they'd need a password. I'm not happy that they don't require it on my phone.

Other apps can be trivially protected by an app-lock. I prefer not to use an app-lock for the web browser. And anyway, unlocking it for a friend to use just leaves the same problem.
The only solution I am aware of (besides hacking the code itself) is blocking permissions:


Permissions denied
PDroid privacy extension


Regarding PDroid: Currently, only Gingerbread is supported officially but you may find a working patcher for your CM9.1 firmware on XDA. Its Google Play description says: PDroid allows you to block access to the following private data for any application regardless of its permissions: [...] Account auth tokens, [...]

EDIT:
Tried PDroid and found it to work great. 
You need a compatible ROM (CM, AOKP, PA,...) and AutoPatcher (download here) plus either the original PDroid or the PDroid2.0 app (see 1st post/attachment). Note: v2.0 needs JellyBean, use the old one for ICS and below (the original author hasn't updated the app for some time and hasn't ported the original Gingerbread patches. Autopatcher includes both ported original PDroid patches and the v2.0 fork for JellyBean)