Quick answer
Plaid is a financial technology company that provides the secure infrastructure connecting consumer apps to banks. When you link your bank to Venmo, Robinhood, Spew, or any of 12,000+ other apps, you’re usually going through Plaid.
Plaid connections are read-only by default. They cannot move money out of your accounts. Your bank login credentials are encrypted and, in many cases, never shared with the connected app. Plaid uses OAuth or token-based authentication with most major banks.
Plaid is used by 8,000+ companies and has connected over 200 million consumer accounts. It’s widely considered the industry standard for consumer financial data access in the US.
What Plaid actually does
Think of Plaid as a translator. Every bank has its own systems, data formats, and security requirements. Before Plaid, every app that wanted to read bank data had to build a separate integration with each bank.
Plaid built one consistent integration layer. Apps talk to Plaid. Plaid talks to banks. The result is:
- You link your bank account once in the app
- The app receives standardized data (transactions, balances, account numbers)
- Your bank credentials stay protected
Plaid currently connects to 12,000+ financial institutions in the US, Canada, and Europe, including every major US bank.
How the connection works
When you connect a bank account through Plaid, here’s what happens behind the scenes:
- The app shows the Plaid Link interface. It looks like a modal window with the bank’s logo.
- You search for your bank. Type the name, select from the list.
- Plaid opens a secure login screen.
- For banks that support OAuth (Chase, Wells Fargo, Capital One, Bank of America, and most major banks), you’re redirected to the bank’s own login page, authenticate there, and the bank sends an access token back to Plaid. Your credentials never touch Plaid or the app.
- For banks without OAuth, you enter your username and password into Plaid’s secure form. Plaid encrypts these and uses them to log in to your bank on your behalf.
- The bank confirms the connection. You may need to approve via SMS or email.
- Plaid fetches data. Depending on what the app asked for: account info, transaction history, balances, account holder identity.
- Data flows to the app. Only the data types you authorized. Everything else is blocked.
After the initial connection, Plaid refreshes data periodically (every 6 to 24 hours for most apps). If you change your bank password, you re-authenticate through Plaid.
What data Plaid can access
Apps request specific “products” from Plaid. Each product accesses a different data type:
- Transactions: historical and ongoing purchase and deposit data (most common)
- Auth: account and routing numbers for ACH transfers
- Balance: real-time balance checks
- Identity: account holder name, address, email, phone (for KYC compliance)
- Income: verified payroll and income data
- Investments: holdings and values in brokerage accounts
- Liabilities: loan balances and terms
- Assets: comprehensive asset reports for lenders
Apps can only access products they’ve asked for and you’ve explicitly authorized. You can revoke these permissions anytime at my.plaid.com.
Is Plaid safe?
Plaid uses bank-level security practices:
- Encryption in transit: TLS 1.2+ for all data
- Encryption at rest: AES-256
- Multi-factor authentication: Supported where banks provide it
- SOC 2 Type II certified: Audited annually
- ISO 27001 certified: International information security standard
- No credential storage for OAuth banks: Your login never touches Plaid for major banks
- Read-only by default: Cannot initiate transactions
Plaid also maintains a 24/7 security team, runs regular penetration tests, and maintains a bug bounty program.
That said, “safe” is relative:
- Plaid is safer than handing your password to a bank-screen-scraper app from 2015.
- Plaid is not infallible. In 2022, Plaid settled a class-action lawsuit for $58 million over historical data practices (collecting more data than some users realized and retaining it longer than expected). Plaid’s current practices are compliant and significantly more transparent.
- Your risk surface expands slightly every time you link another app. Each connected app is another place your transaction data exists.
What Plaid cannot do
- Move money out of your accounts without authorization. Even payment-initiating Plaid products (Plaid Transfer) require explicit per-transaction authorization by you.
- Change your bank password or account settings.
- Read your bank’s secure messages or documents.
- Access accounts you didn’t explicitly connect.
- Sell your transaction data to advertisers. (Plaid’s terms prohibit this. The connected app may have different policies.)
Who pays Plaid?
Apps pay Plaid, not you. Plaid charges apps fees for each connection and/or data pull. Consumers don’t pay anything to use Plaid.
You’re not the customer. You’re the user of the authorization flow. Banks are technically Plaid’s partners; apps are the paying customers.
Apps that use Plaid
A partial list of well-known apps using Plaid:
- Payment apps: Venmo, Cash App, Zelle (some integrations), Chime
- Investing: Robinhood, Acorns, Betterment, Wealthfront, Stash
- Budgeting & finance: Spew, YNAB, Copilot, Simplifi, Rocket Money, Monarch
- Crypto: Coinbase, Gemini
- Lending: SoFi, LendingClub, Affirm
- Mortgage: Blend, Rocket Mortgage
- Small business: QuickBooks, Gusto, Shopify, Square
If you’ve used any of these, you’ve used Plaid.
Plaid vs MX vs Finicity
Plaid is the market leader in consumer bank connectivity, but there are competitors:
- MX: Strong in mid-market and credit unions. Used by some major budgeting apps.
- Finicity (owned by Mastercard): Heavy in mortgage and lending. Similar to Plaid on the consumer side.
- Yodlee: Older, still widely used, particularly in investing apps.
From a consumer security perspective, all four are comparable. They’re all SOC 2 certified, encrypted, and read-only by default.
How to disconnect Plaid
To disconnect Plaid from an app:
- In the app: Remove the bank connection from within the app itself.
- In Plaid’s consumer portal: Go to my.plaid.com, sign in with your email, see all your connections, revoke any you want.
- Change your bank password: Forces re-authentication for all Plaid connections. If you don’t re-auth, they break.
You can disconnect at any time. The app will lose data access after disconnection.
FAQ
Does Plaid store my bank password?
For OAuth-enabled banks (Chase, BofA, Capital One, Wells Fargo, and most major banks), Plaid does not store your password. Authentication happens directly with the bank, which sends Plaid a token.
For non-OAuth banks (some smaller institutions), Plaid stores encrypted credentials to refresh data. You can disconnect anytime to purge them.
Can Plaid take money from my account?
Not without your explicit authorization. Standard Plaid connections are read-only. Payment-initiating products (Plaid Transfer, Plaid Auth) require per-transaction consent.
Is Plaid safer than entering my bank info directly into an app?
Yes, in most cases. Many apps that don’t use Plaid use older screen-scraping methods that store your password less securely. Plaid is closer to the way apps should access bank data.
Has Plaid ever been hacked?
Plaid has had security issues audited and handled (per SOC 2 and public disclosures). No large-scale credential breach has been publicly disclosed. The 2022 class-action lawsuit was about data practices, not a breach.
Can I use Plaid without linking my bank?
No. Plaid’s whole purpose is bank connectivity. Without a bank connection, there’s no Plaid integration to use.
What happens to my data when I disconnect?
Per Plaid’s policy, data is deleted according to the app’s data retention settings. The app decides what to do with historical data it already pulled. Contact the app directly to request full deletion.
Does Plaid slow down my banking?
No. Plaid reads data in the background, typically while you’re not using your bank. It has no impact on your bank’s performance.
Bottom line
Plaid is the invisible backbone that lets modern finance apps work. It’s read-only, widely trusted, and used by virtually every major US financial app. For most consumers, using Plaid is the safest and most convenient way to connect a bank account to an app.
Spew uses Plaid for secure, read-only bank connections to track bills, spot subscriptions, and forecast cash flow across all your accounts in one view. 30-day free trial, no card required.