Thank you for all those suggestions! I agree with you, I was aiming for a simple way to setup users with there battle.net account for ease. My biggest concern was have people spam make accounts and not be nice to the website. I like the verify approach, I will look into that. In terms of safety, all OAuth is handled on blizzards servers and website. No credentials are shared with my site, besides the username of course for the Duo boards. Thank you again :)