Live data from Hacker News

Ask HN: Why would people trust their banking credentials to a service like Mint?

news.ycombinator.com

41–50 of 62 posts

Re: Ask HN: Why would people trust their banking credentials to a service like Mint?

#41
post #4

y, I think providing your credentials is a bad idea and haven't done it. This came up in a thread a few weeks ago. I can't believe banks aren't required to provide a read-only access and/or API to your account. That would be a great solution for rolling your own budget tracker and allowing access for services like mint. Does anyone know if any banks have read-only passwords or an api?

Wells Fargo lets you create a read-only account:

https://www.wellsfargo.com/help/faqs/profile/

Re: Ask HN: Why would people trust their banking credentials to a service like Mint?

#43
I use USAA, and it aggregates my accounts from multiple other sources all by itself. I log in to USAA and see my vanguard retirement investments, my joint checking account that I share with my wife, and my daughter's college savings account from another bank. I also see my mastercard bill and my insurance bills.

I also get an incredibly powerful mobile app, free checking, and ATM fee reimbursement.

The interesting part is that I was able to hook up those external bank accounts without providing username and passwords to USAA.

Note, their banking services are available to anybody, even non-military.

Re: Ask HN: Why would people trust their banking credentials to a service like Mint?

#44
post #35
post #9

Yes, I've been a mint user since well before they were bought by Intuit. I didn't think it was a bad idea, because it is clearly explained that Mint can't make changes to your accounts. It is only used for query. I am under the impression that the banks only allow Mint query capabilities. They've lately released a new service called "Mint Bills"-- which does make changes but that is separate from their main "Mint" se…

> I didn't think it was a bad idea, because it is clearly explained that Mint can't make changes to your accounts. Mint can do anything that you could do with the same credentials. Unless you have read-only credentials, they can technically make changes using your details.

i wouldn't expect people from this site falling for this marketing shenanigans...

Re: Ask HN: Why would people trust their banking credentials to a service like Mint?

#45
This is why some people use the "offline" applications like GnuCash[1] or cli-ledger[2]. These programs can be used in such a way that they don't even know the financial institutions you do business with, never mind usernames/passwords.

However, as others have stated, they view the convenience gained to be worthwhile enough to sacrifice the security of their accounts. Plus, I'm sure they asses the probability of Mint (and their employees, contractors, etc) using this information in any way other than "read-only" (at least intentionally) to be very close to zero.

[1] http://www.gnucash.org/ [2] http://ledger-cli.org/

Re: Ask HN: Why would people trust their banking credentials to a service like Mint?

#46

I use USAA, and it aggregates my accounts from multiple other sources all by itself. I log in to USAA and see my vanguard retirement investments, my joint checking account that I share with my wife, and my daughter's college savings account from another bank. I also see my mastercard bill and my insurance bills. I also get an incredibly powerful mobile app, free checking, and ATM fee reimbursement. The interesting pa…

NetBank was able to pull in information from my credit cards long long ago when it existed. I remember using this feature at least 10 years ago. I can't remember if it was transactions or balance only though.

Re: Ask HN: Why would people trust their banking credentials to a service like Mint?

#47

It's a bad idea, but if you want automated access it's the best we've got. Ideally banks would provide a nice API, but without a good enough reason they're just not interested.

Hell, I wish everyone would provide a nice API.

We can only dream :(

Re: Ask HN: Why would people trust their banking credentials to a service like Mint?

#48
FWIW, I would really like to be able to do scripted management of my finances. Stuff like automatically paying my credit cards as much as possible while maintaining some minimum balance in my checking account (moving money from savings if necessary), or if my checking account is over some value, use the excess to fill savings account to $X, or put it in an investment account.

Re: Ask HN: Why would people trust their banking credentials to a service like Mint?

#49
post #27

I'm actually curious about this. How do popular web apps store your id/pw for other sites? I know personally that Mint (Yodlee), Zenefits, TriNet Expense, and BoA all log into other sites but I'm curious how/where they store the passwords? If they create a scraper then it means they have to store the password (encrypted) and then decrypt it so the scraper can use it? What happens if a master app (let's use Zenefits a…

You've kind of answered your own question there - if they're able to log into other sites without using some kind of OAuth-type mechanism that doesn't require them to store your password, then a hack will compromise those passwords.

Re: Ask HN: Why would people trust their banking credentials to a service like Mint?

#50
post #9

Yes, I've been a mint user since well before they were bought by Intuit. I didn't think it was a bad idea, because it is clearly explained that Mint can't make changes to your accounts. It is only used for query. I am under the impression that the banks only allow Mint query capabilities. They've lately released a new service called "Mint Bills"-- which does make changes but that is separate from their main "Mint" se…

[deleted]
Post reply on HN