Lax Security with Quicken Classic

When logging into Quicken Lifehub as 2FA is part of the security, …why not with Quicken Classic?

Quicken Classic is an application that resides on your local drive, not on the Web. I know of no resident application that requires 2FA because it would mean that you would need to be both sending the 2FA request to yourself and would then be receiving the 2FA response from yourself.

BTW, Quicken.com, Quicken Simplify, Quicken on the Web and as you noted Quicken Lifeweb all are Web-based and all utilize 2FA already.

If you are instead referring to the One Step Update download connection methods: Quicken already supports 2FA but the 2FA request must originate from the Financial Institution (FI), just like what happens when you try to log into the FI websites over the Internet. When the FI sends the 2FA request, Quicken Classic will then prompt you to enter it before the access is granted. Quicken Classic cannot initiate the 2FA request for the FI because the FI is the entity, not Quicken, that sets the security requirements for access to their system. If you think you should be getting 2FA requests from your FIs you should contact them to make the request.

Or am I misunderstanding that your Idea is about? If so, please provide more clarifying details on what it is that you would like to see.

My understanding of what you said you would like to see: You would like to get 2FA prompts when you log into your account on Quicken.com in your browser. Is this correct?

If so, that already exists. While I do see a means to change which method I would like to get the 2FA prompt I see no way to turn it off. Every time I log into my Quicken.com account I get a texted 2FA code that I need to enter before I can access my Quicken.com account. You are not getting that? Maybe check your Quicken.com account settings for Sign-In & Security?

If you are talking about getting a 2FA prompt when opening a data file with the installed software: I don't see how that could work. Quicken Classic might be a subscription service but the software resides on the local drive, not on a Quicken server. We can enter PW protection for the data file and occasionally Quicken will prompt for the Quicken ID and PW to revalidate/sync the software with the Account Cloud and the online account. But 2FA? I don't see there being any logic to it just like I have never gotten a 2FA request for any resident software that I use. Not even MS requires that….unless I am trying to log into my online MS account. But MS does not require 2FA for any of the many different MS apps that reside on my computer's local drive.

When signing into the app there is a connection being established (not just an initial temporary connection) between the app and the Quicken server, mainly to validate the software license, the subscription (status and edition), version (current or needing to be updated), etc. All pretty benign functions that really does not have any personally ID, financial data nor financial institutions security info.

But I suppose perhaps when signing into the app it might be possible (I do not know if it would be possible) to add a 2FA requirement but I'm not sure that I understand the need for it because the app itself has no personal information nor financial data nor financial institutions security information in it. There is also no Cloud Account at this point (that I know of) so no one has any access to our online Quicken accounts.

The app only has access to that kind of personal, financial and security data after a data file has been created and/or is opened. The data file has a unique ID that is linked to (and only to) a single Cloud Account that has a unique ID. This link prevents any other data file from accessing this Cloud Account or vice versa in any way.

So would not setting up PW protection to the data file (something that IMO everyone should always do with every single data file they have except for possibly some test files) in essence provide that 2nd level of sign-in security that is desired? To me it appears that it does.

And I keep coming back to the fact that I have no other resident applications that I am prompted for 2FA when opening the app nor when opening my locally saved data file. Why should Quicken be the outlier on this?