OAuth 2.0 allows a user to grant a third-party application access to their resources without sharing their credentials. It typically involves the user being redirected to an authorization server to log in and grant permissions, after which an access token is returned to the application for API calls.