Why don't I need to enter my bank password to download from my bank?
Overview of Express Web Connect
When you set up your Express Web Connect accounts, you entered your username and password for your bank. Quicken then passed these credentials to our aggregation provider, who encrypted and stored your credentials on their servers in order to enable you to quickly download your banking transactions. For more information on how Express Web Connect works, please see the section Express Web Connect / Quicken Connect – Details in this FAQ.
What is changing?
Quicken is updating to a new, modern aggregation platform, with the same trusted bank aggregation partner. The new aggregation platform is more secure, faster, and will help reduce online banking errors.
What does this mean for me?
Quicken will continue to function in the same way; your encrypted credentials are stored with our aggregation provider, and they pull your transactions from your bank using those encrypted credentials. As part of this update, you’ll no longer need to take the additional step of entering your Express Web Connect bank passwords when you update your accounts, and you’ll also no longer see your Express Web Connect credentials in the Password Vault.
Why don't I have to enter my passwords?
As part of this move, we’re removing the additional step of entering Express Web Connect account passwords before a One Step Update, because this step is not required to pull your latest transactions. Just as Quicken has always functioned, your encrypted credentials are stored with our aggregation provider, and they pull your transactions from your banks using those credentials.
Entering the password before a One Step Update was just an additional verification step, to ensure that if someone accessed your file they could not run a One Step Update; you can maintain this same level of verification by adding a data file password to your file.
Is my data safe?
Yes. The safety of your data is our number-one concern, and nothing is changing about where your data is stored. While our aggregation provider has always encrypted and stored your Express Web Connect bank account credentials, with this newer, more modern platform, we’re actually increasing the security of Express Web Connect.
Previously, your bank passwords were sent via https to our aggregation provider, (this is the same level of security as logging into a secure website). With the new platform, we encrypt your credentials before we send them to our aggregation provider, essentially doubling the security of your credentials.
As always, if you would still like to ensure that no one other than you can access your data file, you can also add the extra layer of a data file password.
What do I need to do?
Nothing! If you’ve previously entered your credentials for Express Web Connect accounts, they’re already encrypted and stored.
I'd still prefer to enter my passwords every time I update my bank accounts
There's not currently a way to revert to the old Express Web Connect process, however, if you prefer to enter your passwords directly with the bank, you can switch your connection type to Direct Connect (if your bank offers this) or Web Connect. Web Connect requires you to log into your bank's website and download a .QFX file of your transactions for import into Quicken.
What if I need to change my bank password?
If you have recently changed your password for your bank's website, you will be prompted to change it in Quicken after you attempt to update your accounts with the old, stored password.