6

Many services, like Coinbase or Robinhood, use Plaid to deposit money from Bank. I understand that Plaid stores my login and password, somewhere... somehow... who really knows. A lot of people complain about that.

So I have an idea, but it's so simple I'm not sure if that would work.

Let's say you trade on Coinbase. Every time you need to deposit money via Plaid, you:

  1. change the password to your online bank account
  2. pair your bank with Coinbase
  3. deposit money
  4. unpair your bank (I'm not sure if necessary)
  5. change back the password.

Would you consider this approach 100% safe?

2
  • See also this great question about Plaid: security.stackexchange.com/questions/198005/… – Ryan Jul 17 '19 at 14:32
  • Original poster is a genius. This eliminates nearly all the weaknesses in PLAID. And even in those 5 minutes, the other party could not change your credentials as they don't have access to them. – NetSecurity Expert Feb 26 at 15:20
1

I know nothing of the services you're discussing, but I wouldn't be comfortable with giving my username and password for my bank account to any third party. At that point the other party is you, as far as your bank is concerned. The third party could change the password, change your email, change your address, etc. You might be able to convince a bank to roll back the changes but it wouldn't be fun. Your bank may even have specific language in your banking contract to limit their liability in case of negligence on your part.

3
  • I'm not exactly sure what do you mean by "They"? Coinbase doesn't know the password. Plaid technically yes, but they are safe. What's not safe (Imho) that there is a possibility that someone will hack into Plaid in the future. For the sake of this question I assume, that Plaid itself is safe (even so, they will have my password only for 5min). But thanks for answer – Ish Thomas Jan 26 '19 at 2:13
  • Sorry, I hadn't realized I misused 'they'. I've amended the answer to make clear that I think your bank may not be happy about you sharing your username and password with a third party service. Thanks. – sarnold Jan 30 '19 at 3:53
  • 1
    @IshThomas what do you mean Plaid is safe? ctvnews.ca/business/… and security.stackexchange.com/a/214567/149193 – NH. Mar 25 at 20:07
0

No.

The reason being that they collect all the data they can from your bank when they get access. They get information about all of your loans and payment history. They can then sell or lose this information.

It's a huge privacy problem. It's also totally unnecessary. They should be able to do low cost transfers in and out using only the checking information. This is how all other services worked throughout history. No reason to invent a less secure option.

2
  • I believe OP wants to know if his password are safe, not his entire banking history. Privacy-wise, the bank is already selling that info anyway. – ThoriumBR May 17 at 21:21
  • The password is only as safe as the person holding. This increases your attack surface. It's possible if they are breached that your password could be leaked in the breach. If your bank is selling your info you should join a credit union. – HackSlash May 17 at 21:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.