3 ms·

I believe most if not all legitimate companies that ask for your banking credentials (besides your bank, obviously) are just passing them straight to https://pl

I believe most if not all legitimate companies that ask for your banking credentials (besides your bank, obviously) are just passing them straight to https://plaid.com/ https://plaid.com/. It's still questionable whether you should trust Plaid with your banking credentials, but at least you probably don't need to trust that Paypal and Mint are both going to store your credentials securely.

bpicolo 8y ago
> but at least you probably don't need to trust that Paypal and Mint are both going to store your credentials securely. Sure you do. They have it in plaintext on their servers. It can end up in logs. It's also not just Plaid - Mint uses Intuit, Yodlee is an option. There's a whole lot of people you need to trust to use these services For many banks, it also means you need to disable 2fa on your banking account, so using these services directly weakens your security.
saluki 8y ago
Why don't banks provide a read only api and login/password if this type of thing is becoming more common. Providing any company my banking or email account login password sounds like a really bad idea. And something I'm not willing to provide.