FIDO / U2F / Token Support for Banks?

MarcSnyder

I did some searching - and didn't find a good answer, and the last topic seems to be a couple of years old.

I'm ideally looking to secure my bank / institution accounts with Fido / U2F keys, or with Token based authentication if Fido / U2F isn't supported.

Once I do that - will Quicken for Mac be able to log in to download my transactions via direct connect?

I'm using it on a Mac mini - so the key would be a USB one that's inserted in the Mac at all times.

And bonus if I could use the same key to secure my online quicken account with the same key.

Thanks!

Boatnmaniac

I can't speak to how/if U2F is compatible with Fidelity downloading. But you should know that Fidelity is in the process of moving away from and discontinuing support for Direct Connect. They are implementing a token based authentication where during the online services setup we will be directed to the Fidelity website where we will need to log in and authorize them to download to Quicken (actually to Intuit who is the aggregator). Then Fidelity will provide a security token to the aggregator which will be used to download financial data on our behalf.

I'm not sure where this change is at for QMac but for QWin it is supposed to occur later this month.

Chris_QPW

It is going to be tricky to give an answer for Quicken Mac, depending on if “Direct Connect” really means the Direct Connect protocol or just One Step Updating.

Quicken Mac uses the term Quicken Connect to mean both protocols that Quicken Windows calls Express Web Connect and Express Web Connect +.

The Direct Connect protocol has its own security model and will not be affected in anyway by use of a security key. It will nether use it or be blocked by use of it at the financial institution’s website.

The same applies to Express Web Connect +.

For Express Web Connect this is the aggregator logging into the financial institution’s website, so all the rules that apply to you still apply. I’m not 100% sure of this but I don’t think Quicken ever uses such keys, so the result would be the download would be blocked.