diff --git a/README.md b/README.md
index 5fc198a..58c0b12 100644
--- a/README.md
+++ b/README.md
@@ -130,6 +130,34 @@ The `secret` provided in `config.json` will be used by [express-session](https:/
 
 ### Google
 
+- Head to [console.developers.google.com](https://console.developers.google.com)
+- create project
+    - `My Project` (top left) > `new project`
+    - *Project Name*: the name of your blog
+    - *Location*: Optional (`No organisation` is ok)
+    - create
+- switch to new project
+- library (on the left)
+    - search for `google+ api`
+    - enable
+- credentials (on the left)
+- OAuth Consent Screen tab
+    - *Application Name*: the name of your blog
+    - *Support Email*
+    - *Authorized domains*: add your primary domain (`https://example.com` not `https://schnack.example.com`)
+    - *Application Homepage link*: your front page
+    - other fields appear to be optional
+- create credentials > OAuth Client ID
+    - *Application Type*: Web application
+    - *Name*: the name of your blog
+    - *Authorized JavaScript Origins*: primary domain
+    - other fields appear to be optional
+- note warning:
+
+> OAuth is limited to 100 sensitive scope logins until the OAuth consent screen is published. This may require a verification process that can take several days.
+
+
+
 ### Facebook
 
 ## Notifications
diff --git a/docs/index.html b/docs/index.html
index a5db89b..f4d93ae 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -413,7 +413,43 @@ <h3 id="google">
         Google
       </a>
     </h3>
-  
+  <ul>
+<li>Head to <a href="https://console.developers.google.com">console.developers.google.com</a></li>
+<li>create project<ul>
+<li><code>My Project</code> (top left) &gt; <code>new project</code></li>
+<li><em>Project Name</em>: the name of your blog</li>
+<li><em>Location</em>: Optional (<code>No organisation</code> is ok)</li>
+<li>create</li>
+</ul>
+</li>
+<li>switch to new project</li>
+<li>library (on the left)<ul>
+<li>search for <code>google+ api</code></li>
+<li>enable</li>
+</ul>
+</li>
+<li>credentials (on the left)</li>
+<li>OAuth Consent Screen tab<ul>
+<li><em>Application Name</em>: the name of your blog</li>
+<li><em>Support Email</em></li>
+<li><em>Authorized domains</em>: add your primary domain (<code>https://example.com</code> not <code>https://schnack.example.com</code>)</li>
+<li><em>Application Homepage link</em>: your front page</li>
+<li>other fields appear to be optional</li>
+</ul>
+</li>
+<li>create credentials &gt; OAuth Client ID<ul>
+<li><em>Application Type</em>: Web application</li>
+<li><em>Name</em>: the name of your blog</li>
+<li><em>Authorized JavaScript Origins</em>: primary domain</li>
+<li>other fields appear to be optional</li>
+</ul>
+</li>
+<li>note warning:</li>
+</ul>
+<blockquote>
+<p>OAuth is limited to 100 sensitive scope logins until the OAuth consent screen is published. This may require a verification process that can take several days.</p>
+</blockquote>
+
     <h3 id="facebook">
       <a class="anchor" href="#facebook">
         Facebook