Why you don't need to give an app your bank password to track your finances

The alternative is simpler than you think — and it means nobody ever holds your bank credentials but you.

Most personal finance apps ask you to connect your bank account directly. You enter your login details, the app stores an access token, and from then on it checks your transactions automatically.

It's convenient. It's also a choice worth thinking about.

What "connecting your bank" actually means

When an app connects to your bank, it typically stores either your login credentials or an OAuth access token — a kind of long-lived key that lets it read your transactions without your password. That token lives on the app's servers.

If the app is breached, those tokens are compromised. If the app shuts down unexpectedly (as Pocketbook did), you may not get advance notice to revoke access. If the app is sold to a new owner, their privacy policy may differ from the one you agreed to.

The CSV alternative

Every major Australian bank lets you download your transactions as a CSV file — usually in 2–3 minutes. You export the file from your bank's own app, then import it into your finance tool.

This means: no credentials stored anywhere. No access tokens. No ongoing connection. The only thing that reaches the finance app's servers is the structured transaction data — dates, amounts, descriptions.

The trade-off

The trade-off is manual. You need to export and import whenever you want your data updated — typically once a month, sometimes weekly. It takes 2–3 minutes.

For most people, that's an acceptable cost. The alternative — a permanent connection to your bank — is one that's easy to set up and easy to forget about. The CSV approach means you're always in control of what you share and when.

Neither is wrong

Bank connections are convenient and legitimate. Open banking exists for good reasons. If automatic sync is important to you, apps like Frollo offer that for Australian banks.

If you'd rather keep your bank credentials entirely separate from any third-party app, CSV import is the cleaner path. That's the choice Beholdr was built around — and it's why we'll never offer a bank connection option.