capital one requires authentication every time I log into YNAB

Hi there! I'm not sure why this occurring, but every day when I log into YNAB, my capital one credit card accounts require a new authentication (ie, sending a pin to my phone number or email.) Is there any way to prevent this from happening?   It's getting slightly annoying. :)

Thanks in advance!

71replies Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
  • This is my #1 complaint about YNAB.

    Other services, such as Personal Capital, are able to import data from my Capital One account seamlessly.

    Like 1
      • Adam A
      • Software Engineer
      • adam_a
      • 1 yr ago
      • Reported - view

      Adam A I am no longer having these issues. Everything seems to work seamlessly now. Thanks, YNAB, for getting this done!

      Like
    • Hi Adam A ! Thanks for checking in and letting us know. I'm so glad to hear that! Our Direct Import partner and Capital One have been working hard to get things running smoothly!

      Like
  • Whenever you log into your Capital One account, do you go through the same process ( enter a password and then have a passcode sent to you for entry? At least with my BOA account, this was the two factor authentication that I had set up through BOA. Once I removed it through the BOA website, the requests stopped through YNAB too.

    Like 1
      • Adam A
      • Software Engineer
      • adam_a
      • 1 yr ago
      • Reported - view

      Nina Shelly No, it doesn't require the two-factor authentication to login to their website. And YNAB works fine with my Capital One checking and savings accounts, but not my Credit Card (even though it's the same website and login)

      Like
  • Same problem here. Although it is not EVERY time. Just MOST of the time. 

    Like
  • I’m sorry you’re having to re-authenticate your accounts so frequently—I know it’s frustrating. We’ve dug into this issue on many occasions with our providers and we learned that, at this time, certain security protocols require repeated re-authorizations. In other words, they’re expected.

    This is great for security, of course, but not so great for the import experience. We completely understand that which is why we’ve had our Direct Import partner looking into the issue for months — pushing and prodding them to make it go away. Ultimately, they’ve determined they just don’t have any control over these security requirements and how often institutions require users to re-login.

    If you’re finding that you can’t connect and/or import even after re-entering your credentials, that is not expected. Please let me know if that’s the case!

    Like
      • Lenny L
      • Cyan_Colt.2
      • 1 yr ago
      • 2
      • Reported - view

      Faness  I understand the security issues, but I don't know what YNAB is different than other websites. I would think that security protocols would be the same. I'm a long time user of Mint, and I find I only have to re-authenticate there about once a month. With YNAB and the same account, it is 3-4 times a week. 

      Like 2
      • Adam A
      • Software Engineer
      • adam_a
      • 1 yr ago
      • Reported - view

      Lenny L Same here - I never have to re-authenticate this particular account with Personal Capital and I have to do it every single day with YNAB.

      Like
      • Jannelle
      • jannelle_ynabsupport
      • 1 yr ago
      • 1
      • Reported - view

      Adam A Lenny L ,

      I hope you don’t mind if I jump in for Faness here! Yeah, that's a great question! Whether or not you'll need to re-authenticate depends on the institution and type of connection they have with each particular institution.

      Direct connections are generally more stable (which ,I'm assuming, is what Mint or Personal Capital have), which means they should hardly ever require a reauthorization, even when a one-time password is involved. However, our Direct Import partner doesn't currently have a direct connection for this particular financial institution.

      They (and I!) definitely recognize this is something they need to work on improving. It does require quite a lot of work between our data provider and the institution to be able to create a more seamless integration (talks at the business level), so while there isn't an immediate resolution, it's definitely the goal! 

      Like 1
      • BudgetMaster
      • Debt free and so grateful!
      • Budget_master
      • 1 yr ago
      • 1
      • Reported - view

      Jannelle What would an estimated completion time be? Are you thinking months or a year+? It really is such a drag, especially when I update my budget every day. When I used Chase credit cards with YNAB, everything imported seamlessly and I knew when I signed on to YNAB if I had any transactions to resolve. Now I have to go in, make sure Capital One has connected (never), go through the steps to authenticate, then have the transactions import, and then I'm at the point of resolving them. In truth it only takes a couple of minutes, but it's SUCH a hassle especially considering that it doesn't happen with other providers.

      Like 1
    • BudgetMaster You're not alone! Sadly, this does happen with other institutions, it's just that Capital One is one of the biggest on that list.

      We can't say for certain when this could be addressed. Our Direct Import partner considers the connection in good status as long as you're able to connect. They understand it's not a convenient requirement, and they want to improve it, but their main priority is that the connection works.

      For that reason, I wouldn't expect this to change in the immediate future. I could be wrong, but I'd rather set expectations for the long haul here. 

      Like
    • Faness BudgetMaster I am in the same boat, but did some across this article that says Finicity (one of YNAB's direct import partners) struck a deal with Capital One for do direct data sharing starting in Q1 2019 (https://www.finextra.com/pressarticle/75027/capital-one-inks-data-sharing-deal-with-finicity).  Once this happens I would hope (or really assume) the constant two-factor re-authentication issue with YNAB would go away.

      Like
  • This is the same situation for Arizona Federal Credit Union accounts, very frustrating. At least iOS 12 automatically copies the SMS'd code now, but I'd love to see this go away. I feel like it use to hang on to authentication a lot longer. But now it's almost every day.

    Like
  • Just an observation: When I log in to my Capital One account, I see other services (Mint and Expensify) as "connected". YNAB is clearly not connecting in the same way as these other services. It seems like it is time to switch to the platform these other services use.

    Like 1
    • Hi Lenny L !

      You're right - we are using a different connection. Mint just so happens to have a monopoly on Intuit, who owns them, which allows them to have direct connections to banks like Capital One. Our Direct Import partner is working on it, but it'll take some time to build those direct connections.

      Like
  • I'm new to YNAB and having this issue too. Though your direct import partner doesn't see it as a priority, it appears you'll be losing customers over this one. It's quite an obstacle. I can't see how to do it without reestablishing a connection every time, THEN doing the PIN. I don't know how long I can keep this up before wandering off to another option like Quicken.

    Like
    • I appreciate that feedback, Magenta Guitar . I too have to reauthenticate my account each time and it can get tedious. 

      Like
  • FWIW completely deleting my connections and redoing them resolved the issue for me. 

    Like
  • Hello, just wanted to add a "Me too!" to this thread, I have to re-authenticate my Capital One account daily at this point.. super lame. :D

    Like
    • Hi Gray Griffin !

      Sorry for the lameness! Our Direct Import partner is still working on improving things in this area. For now, this is expected behavior, but we're keeping our fingers crossed that it changes in the future. :)

      Like
    • Faness Thank you!

      Like
  • And we're back to authenticating on every single freaking login, and even times when I'm already logged into YNAB. Can someone stop failing miserably at this as literally everyone else can partner with Capital One correctly?

    Like 4
  • Same. This entire past week. Very annoying. I'm six months into YNAB and I like it, but getting fed up with the constant issues.

    Like 3
    • Hi Tomato Grizzly ! Your connection is looking good, and I see that transactions imported earlier today. I elaborated on the details behind the re-authorizations further down in the thread.  

      Like
  •  Nicole

    Any word from support on this?  status.youneedabudget.com/ doesn't mention from what I can see.  It's getting annoying.  As others have mentioned, other data aggregation partners seem to be working fine (Mint, Personal Capital, etc).  Only issue is with YNAB.

    Like 4
    • Hi James ! As banks are increasing their security protocols, we're hearing more reports about frequent re-authorizations. Our import partner let us know this is expected behavior, so it won't be mentioned on the Status Page.

      Like
  • I have been able to sync my Capitol One account automatically without problem for the last ~6 months, but this past week I've been having to input my 2-factor code every time.  Something has clearly gone wrong or changed this past week or so.

    Like 2
    • Magenta Colt I posted a little more detail on this down below! As your bank makes changes and security updates, the re-authorization requirements can change—appearing from seemingly nowhere. Sometimes (fingers crossed!) we have heard of them subsiding over time, but it's something we're unable to predict.

      Your connection is looking good!

      Like
  • Same with me!! working just fine until last week, now requires 2-factor authentication.

    Like
    • Hi All! Tomato Grizzly James Magenta Colt Alex_C 

      Certain financial institutions require you to re-authorize your account frequently due to how our integration works with their site security. We spent quite a bit of time investigating the issue with our import partner, and I'm afraid there's nothing we can do to get around the frequent re-authorizations.

      As more and more financial institutions are beefing up their security (like the recent changes after the Capital One breach), it's becoming more common. They want to make sure it's really you! And keep your information safe.

      When institutions make site changes and security updates on their end, this requirement can change — appearing from seemingly nowhere and sometimes even subsiding over time (fingers crossed!), but neither are something we’re able to predict.

      I know it can be frustrating though, and I'm sorry that's the case. The good news is, while it's not so great for the import experience, it's great in terms of security! And you don't need to re-authorize the connection every time it asks—just go through the prompt when you're ready to import new transactions.

      Like
  • This is just awful.  YNAB used to be useful, now it's such a time sink I hate to bother logging in.

    Like
      • Herman
      • herman
      • 5 mths ago
      • Reported - view

      Slate Gray Foal 🤣

      Like
  • It is a drag. I thought I had somehow bypassed it but it just started happening for me in the last 2 or 3 days. I have the Savor which they've been advertising a ton so I'm sure this affects many YNAB users.

    Like
  • Ditto for me with Capital One needing to be re-authorized every single time i log into YNAB to work on my budget....  

    Like
  • I know the cause was explained above, but I am throwing a "me also" in being annoyed with the current interaction with Capital One. 

    Like 1
  • The requirement to go through 2-factor authorization every single day is is a real problem for those of us who live and work in rural areas with no cell service. There is just no way for me to get text messages unless I drive out to a big town, so I am pretty much unable to update my transactions as a rule. This isn't an issue with other services like Mint. They very rarely (maybe once or twice a month) ask to update my credentials.

    I've already left YNAB once, about a year ago, due to frustration with these re-authorization issues. I did miss the budgeting tools, though, and hoped the issue would have been fixed by now, so I re-subscribed to YNAB for another year... but nope, still the same problem. :( I've been manually entering all of the transactions, but it is very time-consuming for customers with many transactions. I guess the only other option is to ditch the credit card companies that are requiring the text message re-authorization and use other cards instead. 

    Like
      • Herman
      • herman
      • 3 mths ago
      • Reported - view

      Cornflower Blue Jackal Not sure it helps you but when capital one reauthorizes for me, I am offered the option to receive a call instead of text.  

      Like
    • Herman Interesting! I wonder why that's not an option it shows for me. The only options are to send a text at my cell phone or a text at my home phone. I've tried the home phone text option since I have xfinity and can technically get texts at the home number online, but not a single one of those texts has come through. So strange that some customers have the phone call option but not all. I'll call them to see what the deal is. Thanks for the heads up!

      Like
      • James
      • james
      • 3 mths ago
      • Reported - view

      Cornflower Blue Jackal Also, another idea - most phones and carriers allow you to receive MMS/SMS text messages via WiFi - it's an option you'll have to enable, but a quick google will reveal how to do that on your phone.

      I do not get an option for a phone call when I have to re-authorize.  This is perhaps having to do with setup on Capital One - worth checking your 2 factor authorization settings at Capital One to see if there is an option to have them call and not just text.

      Like
  • YNAB, can we consider working out a deal with the sync of bank institutions without 2 factor authorization in exchange for 2 factor authorization from YNAB if new IP address is logged?

    Like
    • Violet Viper The same way Google uses 2 factor authorization for new computers, but allows the connection to work with multiple accounts for login. 

      Like
    • Hi Violet Viper !

      I think this is a great idea, but it isn't something we're currently able to offer. The two factor authentication requirement is triggered by our import partner accessing the account under Capital One's new security protocol. Since it's dependent on our import partner's system and not the IP Address associated with the YNAB log in, we can't link the two. It's possible the two factor authentication requirement will change in the future, but we can't say for certain.

      Like 1
  • I am literally considering leaving Capital One over this. Been going on too long without any sign of a resolution. If there's any way to put some influence into this, let me know who I should contact. I'll obviously let Capital One know why I'm leaving, but it might be more influential if I knew who the middleman was.

    Like
      • Superbone
      • YNAB convert since 2008
      • Superbone
      • 1 mth ago
      • 3
      • Reported - view

      mostlybinary OK, funny addendum. I just looked at my account online and I had just been charged my yearly $95 fee on December 7th on my last statement. Did some research and found that if I cancelled my card within 30 days of fee payment, I would get it refunded. I don't use this card enough on dining to justify the $95 yearly fee so I just cancelled the card. I also have the Costco Visa which pays 3% for dining (only 1% less.)

      They are sending me my final cash back reward of $28 plus the $95 fee reversal for a $123 win to end 2019.

      Voila! No more YNAB direct import issues for me. 🙂

      Like 3
    • Superbone I thought this was in the "What did you do to improve your finances today?" thread for a moment. 😅

      I have a hard time making credit card fees worth it, when free cards offer perks that work just as well (for me).

      Like 2
    • Hi mostlybinary !

      We currently have three different import partners (Finicity, MX and Quovo - now Plaid), but they're all seeing this issue with Capital One. They're all working on a better agreement with Capital One, to find a less frustrating ground for users, but this is expected behavior in the meantime.

      Like 1
    • Superbone haha, nice!

      Like 1
    • Faness I only have 1 card that I pay fees on, and that's the AmEx Blue... 6% cash back on groceries and our grocery bill is pretty high, so it pays the fee off many times over. I've never found anything comparable on non-fee cards, but I'm generally opposed to fees unless you can justify it by math.

      Like 2
    • Faness All my Capital One accounts are Bank Accounts... no CC's. I got rolled in when they bought ING during the financial crisis. I got no loyalties though, just love how easy it is to create accounts.

      Like 2
    • mostlybinary I have an Amex card, too! But mine is the fee-free version, so I only get 3% back on Groceries and my local grocery store isn't listed as a grocery store, so I believe I only get 2% back. I know fee cards can be worth it, I just haven't managed to find one that works better for me.. yet! (Maybe..)

      Like 1
      • Superbone
      • YNAB convert since 2008
      • Superbone
      • 1 mth ago
      • 1
      • Reported - view

      mostlybinary Yes, I had that same card for a while until my boys went off to college and it didn’t make sense anymore.

      Like 1
      • Superbone
      • YNAB convert since 2008
      • Superbone
      • 1 mth ago
      • 1
      • Reported - view

      mostlybinary If you don’t have any loyalties, you might try Ally. Very easy to create accounts and they have competitive interest rates.

      My favorite online checking is Schwab . The actually have a 0.4% on checking which is quite rare with no hoops to jump through. I switched to them full time for checking in mid 2019 and it’s been great.

      Like 1
    • Superbone Thanks, that's super helpful!

      It's just been so nice to be able to create accounts on demand quick and easy without having to go into a branch, especially as we've started needing to set them up for kids. A few years ago when we were looking for a new rental, the landlord wanted account numbers on the application, so I just spun up a "dummy" savings account and threw $5 in it, lol.

      Like 1
    • mostlybinary I just got off the phone with Capital One and it did not sound good. They said "YNAB does not use strict enough protocol something, something, something". I tried to sound really miffed, but I also didn't want to tell a bank to stop worrying about security. :-)  Rather than drop Capital altogether (I love using them for savings accounts, so easy to make multiples for me and my kids), instead I am going to switch most of my bills over to my local credit union, which DOES connect to YNAB. I already use the debit card from the local anyway. I am a brand new YNAB'er and was VERY disappointed to see that CapitalOne didn't work!!

      Like 1
    • Alice Blue Battery that’s interesting, but I doubt that the person your Tallinn to would actually know the behind the scenes. It’s actually the partners and not YNAB that are the issue. 
       

      Welcome to YNAB though! I’ve been using YNAB since it was a Windows app... I ran a Windows virtual machine on my Mac just so I could use YNAB. This is a good place to be 😉

      Like
  • Initially this drove me nuts, and then I just decided not to let it bother me. I figure it increases my security, right? Shrug; enter the code. 30 seconds, NBD.

    Like 4
      • Superbone
      • YNAB convert since 2008
      • Superbone
      • 1 mth ago
      • Reported - view

      Slate Blue Lion That's where I'm at. Still bugs me though that it's my only account with direct import issues. I have their Savor card which I only use for dining out and entertainment. It just stays less up to date than all other accounts as I only bother to do it a couple times a week.

      Like
      • Superbone
      • YNAB convert since 2008
      • Superbone
      • 1 mth ago
      • Reported - view

      Slate Blue Lion I just timed the procedure from start to finish. It took a minute and 10 seconds.

      Like
  • Faness said:
    Superbone I thought this was in the "What did you do to improve your finances today?" thread for a moment. 😅

    It definitely belongs! I'm glad this thread caused me to look at that fee and get it refunded before it was too late. I'm sure that's what the credit card companies are hoping you don't do!

    Like
  • Faness said:
    I have a hard time making credit card fees worth it, when free cards offer perks that work just as well (for me).

    I agree! The only reason I did it was for the bonus. It might have been $300 if I remember right. Plus one year of no fee and 4% back on dining and entertainment. It wasn't worth it after the $95 yearly fee kicked in. In the future if I do these deals, I need to set myself a calendar reminder before the fee kicks in to cancel them.

    Like 2
  • Faness  I see you're pretty active in this thread, so I'm replying directly to you. I raised this issue directly with your support team when I first signed up in September, and I'm pretty frustrated to find that you guys still think this is "expected" behavior. Capital One switched to a new API style that allows for "Linked Apps" that have read-only access to your account well over a year ago.

    Leveraging that updated API would not only remove the 2FA issues users are complaining about on this thread, but it will also improve security significantly more than the current method, as the credentials provided to your import partners no longer have the rights to move money. They can only see what transactions happened.

    This *must* be given top priority, it's a huge negative from a customer happiness standpoint, a security standpoint and a reliability standpoint.

    Like 4
    • Hi Kyle Kurz !

      Our import partners have been in contact with Capital One to improve the integration, but their platform will have to be rebuilt to better accommodate Capital One's requirements. The "Linked Apps" require a direct connection between our import partners and Capital One. While this is a possibility, they've let us know this will be a long term issue and is expected behavior for the time being.

      For now, the added security steps are the only way our import partner can connect. We do hope to see this improve in the future, but we can't provide a timeline for those changes.

      Like
    • Faness While I sympathize with "it will take a while" as a developer, the fact is this API change happened over a year ago, as you can see within this thread and various news sources online. When a company like your import partner(s), whose sole job is to import data from a financial institution, takes that long to adjust to changes in a major bank's API protocols, it's time to find another partner or push harder on them to update aggressively.

      YNAB gets my money because they take security and privacy seriously, but this failure to get onboard with a the read-only linked applications process from Capital One is causing me, and I expect others, to reconsider that, as it doesn't show investment in that commitment from YNAB. 

      Like 2
    • metro6audio We completely understand your point. When we first launched the online version of YNAB, we started with only a single direct import provider. We've expanded to now using three separate providers in hopes of improving the import experience, but we recognize we still have a long way to go. Direct import was intended to be a secondary source of entry to help with manual entry, but we know quite a few users rely on it heavily and we hate to see it take away from the YNAB experience. Since adding more import partners didn't resolve our concerns, we're investigating other alternatives and the best way to move forward here. 

      We're going to continue working on this but we know there's a long journey ahead.

      Like 1
Like8 Follow
  • 8 Likes
  • 1 mth agoLast active
  • 71Replies
  • 2192Views
  • 33 Following