Log in with Google Account?

Questioning the wisdom of this new "enhancement".  So now Google is going to have access to our personal finances? Don't they already know more than enough about us. I don't like it.

7replies Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
  • Hi Bordermancer !

    Signing up through Google is completely optional! If you choose not to sign in through Google, then nothing will change with your current account set up. If you'd like to experiment with it, clicking on that option will allow you to link your Google account (you can even link a secondary account if you'd like to share your budget with another email address). This is purely for ease of login and our security protocols are still very much in place! :)

    Like
  • dont use it. Not everyone has a google account, it would be bad for business if ynab forced you to get a gmail before getting there software

    Like 1
    • JoeDid
    • Remember: It is To Laugh
    • Purple_rain
    • 2 yrs ago
    • Reported - view

    I saw this most-unwanted "enhancement" to login options. Bad idea. Really bad idea.

    Like
    • nolesrule
    • Been waiting 5 years for the Stealing From the Future fix...
    • nolesrule
    • 2 yrs ago
    • 3
    • Reported - view

    Google doesn't have access to your YNAB account. That's not how these single sign-on services work.

    Like 3
  • If the concern is that they will have access to your budget by enabling this feature, then that really isn't the case here.  This is a token based authentication.  All that means in a simplistic fashion is:  YNAB says "Hey Google, does this person know how to log in to google with this email address?"  Google says: "Let me check with the user. Hey user? Can you login into this email address account?"  If the user can login to Google's services with that email Google responds back to YNAB: "Yep! They passed our test they own this email address, so they are who they say they are! Believe them for X amount of time."  Then YNAB open's it's door to the user hosting all the data and services directly.  Google never sees any of the data from YNAB except for your email address so it can verify you are who you say you are.  In case anyone is wondering, YNAB also cannot use this information to see any of your information that Google owns unless you were prompted by google to share specific information with YNAB.

    This whole premise works because YNAB trusts that they are talking directly with Google (more technical magic to do this) and that Google has safe mechanisms to verify you own the email address in question.  In reality Google is likely to be much better at keeping your account credentials secure and safe then YNAB (sorry YNAB).  In practice it is likely much safer for your budget if YNAB gave you the option to disable their own authentication method for your account, that is likely the weakest link now.

     

    Now, if you think Google will be malicious and tell YNAB they are you through this mechanism as a backdoor to sign in and scrape your financial data.. well then don't use Google. For anything. Ever.    Personally, I don't believe they would ever abuse their position as an identity provider and do something like that. If they did no one would use them as a trusted identity provider anymore and they would be sued into oblivion and likely have their facilities forcibly shutdown by several governments.  At least, I hope so.

    Like 11
      • nolesrule
      • Been waiting 5 years for the Stealing From the Future fix...
      • nolesrule
      • 2 yrs ago
      • 1
      • Reported - view

      James Hehe. You gave the more complete answer. I didn't feel like writing it all out. Kudos for taking the time.

      Like 1
  • If you're using this, I strongly recommend that you turn on Google's Two-Factor Authentication. While I agree that using Google Sign In on YNAB is safe and secure, the risk is that if someone ever hacks your Google account, then they have access to any other site where you use Google Sign In as a method to access your account. 

    Like
Like6 Follow
  • 6 Likes
  • 1 yr agoLast active
  • 7Replies
  • 3761Views
  • 9 Following