Quicken Community is moving to Single Sign On! Starting 1/22/21, you'll sign in to the community with your Quicken ID. For more information: http://bit.ly/CommunitySSO
Schwab Password Length
Phil Derkum
Member ✭✭
Attempting to change Schwab password in my Password Vault I receive an Error Message telling me that a password longer than 14 characters is not allowed
This is not a Schwab limitation!
This is not a Schwab limitation!
0
Comments
If the issue persists, I suggest you deactivate the Online Services of all of the registers associated with the financial institution. After you have deactivated the Online Services of all the registers associated with the financial institution, when you activate the Online Services of one of the registers, Quicken should allow you to save the new password to the Password Vault. Quicken should provide a list of all of the accounts it finds at the financial institution and enable you to link the accounts to the appropriate existing registers.
Premier on Windows 10
"The cause could be that the bank account login password uses special characters that interfere with Quicken's ability to download transactions. These special characters can be (but are not limited to) the ampersand (&), left carat (<), right carat (>), backslash (\), and forward slash (/).
Windows 10 Pro 32 & 64-Bit Build 21322.1000
also Windows 10 Pro 64-Bit Build 19042.804
Note: Product What's New in Quicken is grayed out.. Also Year is stuck on 2020 and Copyright Date is stuck 2018 in About Quicken.
View: https://community.quicken.com/discussion/7859218/work-with-copies-of-your-actual-quicken-data-files/p1?new=1
For those of us that have large Schwab accounts 14 is not enough. My current online Schwab password is 19 characters.
Definite bug in Quicken
https://random-ize.com/how-long-to-hack-pass/?
It says it will take more than 49 billion years to crack it with brute Force guessing.
But frankly this is a whole useless line of thought. Financial institutions lock your account after about three wrong guesses.
The way I understand the system working is that Quicken Inc pays Intuit to maintain such information which it gets from the financial institutions. And it provides that information to Quicken when is suppose to use it to determine what is "good password" or not.
Needless to say there can be a "breakdown" of this information getting passed along.
Personally I think it is all the wrong approach. Quicken shouldn't be the "checker of good passwords". They should just accept any password (with in the limitation of the OFX standard which is 32-characters) and let the financial institution reject the password when connecting if it isn't a "good password".
But of course if they are going to have such a system, they do need to maintain it, and if the financial institution is allowing 19 character then that information should get to Quicken be correct.
"A little birdy" pointed out this information his OFX log:
So clearly at least for Direct Connect (which would be all investment accounts) the financial institutions are actually sending their password requirements. This information doesn't have to come through Intuit, and as such if it is out of date/wrong and Quicken is using it (and I see not reason why it wouldn't be using it) the clearly it should be an easy look in the OFX log kind of operation to see if it is wrong. And if it is then it is the financial institution that has to fix it.
This information isn't available for Express Web Connect accounts so most likely "through Intuit" and refresh the financial institution recommendations are correct for the accounts connected that way.
And given for Direct Connect that this information is coming directly from the financial institution it does make sense that Quicken "pre checks it" instead of just sending the "illegal" password as the user typed it and having it rejected.
BTW in reference to Charles Schwab. I don't have such an account, but the above information from the "little birdy" does, and clearly there isn't a 14 character restriction and he did test that in fact passwords greater than 14 characters work just fine.