Lax Security with Quicken Classic

johnml

I am amazed that the log-in process only requires a username and password. Many sites have updated the security to include 2FA at a minimum. Passkeys much better, but UN and PW only is unacceptable.

If one were to use Quicken on the web where all your financial information is kept and displayed after logging in with only UN ad PW, would you feel safe and protected?

When logging into Quicken Lifehub as 2FA is part of the security, why not with Quicken Classic?

I would like to suggest that the Quicken team update their security, sooner than later.

Boatnmaniac

When logging into Quicken Lifehub as 2FA is part of the security, …why not with Quicken Classic?

Quicken Classic is an application that resides on your local drive, not on the Web. I know of no resident application that requires 2FA because it would mean that you would need to be both sending the 2FA request to yourself and would then be receiving the 2FA response from yourself.

BTW, Quicken.com, Quicken Simplify, Quicken on the Web and as you noted Quicken Lifeweb all are Web-based and all utilize 2FA already.

If you are instead referring to the One Step Update download connection methods: Quicken already supports 2FA but the 2FA request must originate from the Financial Institution (FI), just like what happens when you try to log into the FI websites over the Internet. When the FI sends the 2FA request, Quicken Classic will then prompt you to enter it before the access is granted. Quicken Classic cannot initiate the 2FA request for the FI because the FI is the entity, not Quicken, that sets the security requirements for access to their system. If you think you should be getting 2FA requests from your FIs you should contact them to make the request.

Or am I misunderstanding that your Idea is about? If so, please provide more clarifying details on what it is that you would like to see.