Other than changing my credentials on my financial institutions’ web sites and seeing which tiller account refreshes break, is there a way to find out which, if any, of my credentials are stored by Tiller?
Hi @cuneoa Art,
Column D in the linked sheet indicates if the financial institution supports open banking.
1 Like
Hi. Thanks for pointing me to the open banking information.
1 Like
Another way to check is to start the Edit Credentials process for the institution of interest from the Tiller console and if you get redirected to the institution’s web site login, it’s open banking (otherwise, it will be a data provider, like Yodlee). You can cancel out and not actually complete the process.
2 Likes
Thanks, Mark. I think I get it now. I see an institutional logo at the top of the logon page for the five that are documented in Tiller’s list as open banking. The two non open banking institutions give me an logon page that is not identified. (That bugs me because I don’t know who I’m giving my credentials to.)
In non open banking daily data refreshes who/what supplies my credentials to the institution when the data is retrieved, Tiller or Yodlee? (Probably Yodlee I’m guessing.) It’s not important, I’m just curious.
Here’s an example of what I see for a non-open banking institution.
Notice the Yodlee’s Terms of Use link.
And a relevant snippet for your convenience:
II. ACCOUNT CREDENTIALS AND ACCESSING YOUR DATA
A. Authorization to Access Your Data. By using FastLink you are authorizing Yodlee to access and retrieve on your behalf Data from one or more third-party sources (each a “Data Source” ).
1. Using Data Source Provided Portals to Access Data. Certain Data Sources require you to enable Data access for third-party applications through a portal controlled by the Data Source. For those Data Sources, we will direct you to the Data Source’s portal from FastLink and you must enable access to all Data you would like Yodlee to retrieve for the Application.
2. Using Credentials to Access Data. For other Data Sources, Yodlee will use information submitted by you through FastLink such as account user names, passwords, answers to security questions, and multi-factor authentication codes (collectively, “Credentials”) to access and retrieve your Data from the Data Source .
1 Like
I was confusing open banking with how credentials are managed. From a credentials management standpoint open banking might not matter. I found a Tiller FAQ that states “Tiller does not see or store bank credentials”. So open banking or not, my credentials are collected by Yodlee’s application and reside on Yodlee’s servers subject to their security practices until the data provider revokes them. Or maybe the data provider shares a secret token for Yodlee to use instead. I think. Thanks for your ideas.
My interpretation is that with open banking, Yodlee does not collect credentials and instead data access has been granted via the financial institution’s portal.
2 Likes
Also vote for my feature request 
https://community.tillerhq.com/t/indicate-which-accounts-use-open-banking/28390/2
1 Like
not mad at that plug @foobar ! 
1 Like