What Plaid does
Plaid is a company that acts as a bridge between your bank account and other apps or services you want to use. When you connect your bank through Plaid, you're giving an app permission to see certain information about your account — like your balance, transaction history, or account type — without that app ever seeing your actual login credentials. Plaid handles the connection securely on your behalf.
You encounter Plaid when you're setting up a payment app, investment platform, budgeting tool, or loan service and you see a screen that says "Connect your bank" or "Link your account." That connection screen is usually Plaid's interface, even if you don't see the company's name. Plaid works with thousands of apps and with most major U.S. banks, credit unions, and online banks.
The company makes money by charging the apps and services you use — not by charging you directly. You don't pay Plaid a fee to connect your account.
Key Takeaways
- Plaid is a middleman service that lets apps access your bank information without you sharing your login password with those apps.
- When you see a "Connect your bank" button in an app, that connection usually runs through Plaid's system.
- Plaid uses the same encryption and security standards that banks use, and it does not store your password.
- You control what information each app can see and can disconnect any app from your bank at any time through your bank's settings or the app itself.
- Plaid works with most major U.S. banks and credit unions, though a small number of institutions use their own connection systems instead.
How the connection actually works
When you tap "Connect your bank" in an app, Plaid's interface opens. You search for your bank by name, and Plaid shows you a list of matching institutions. You select yours and are taken to your bank's login page — not Plaid's, and not the app's. You enter your real banking credentials directly into your bank's official website.
Your bank then confirms to Plaid that you are who you say you are. Plaid never sees your password. Instead, your bank gives Plaid a token — a digital key that grants permission for that specific app to see specific information about your account. That token expires and can be revoked at any time. The app receives only the information it asked for and that you agreed to share, not your full account details.
This is different from the old way people connected accounts, which was to type their bank password directly into a third-party app. That method was riskier because the app stored your password and could theoretically use it for anything. Plaid's token system means your password stays with your bank.
What information apps can see through Plaid
The information available depends on what the app requests and what your bank allows. Common data points include your account balance, recent transactions, account type (checking or savings), routing number, and account number. Some apps request transaction history going back several months. Others only need to verify that you have an active account.
You control what gets shared. During the connection process, Plaid shows you what information the app is requesting before you confirm. You can see the scope of access — for example, "This app will see your transaction history for the past 90 days" — and you decide whether to proceed. If you don't want to share that much, you can usually stop the connection and try a different method, like uploading a bank statement manually.
Apps cannot request access to your password, your Social Security number, or information from accounts you didn't explicitly connect. If an app claims it needs your password to work, it is not using Plaid or a similar find service.
Security and what happens to your data
Plaid uses encryption — the same technology banks use to protect data in transit. Data traveling between your bank, Plaid, and the app is scrambled so that no one intercepting it can read it. Plaid's servers are also encrypted at rest, meaning the data is protected even when stored.
Plaid does not store your password. It stores the token your bank issued, which is useless without your bank's systems to interpret it. If Plaid's systems were breached, a thief would get tokens, not passwords. Those tokens are also tied to specific apps and specific permissions, so a stolen token for one app cannot be used to access a different app or to change your password.
Plaid has had security incidents in the past — most notably a 2020 breach where hackers accessed some user data through a third-party vendor. The company disclosed the breach and notified affected users. Like any company handling financial data, Plaid is subject to audits and compliance requirements, though it is not a bank itself and is regulated differently than banking institutions.
Disconnecting apps and revoking access
You can disconnect any app from your bank account at any time. The fastest way is usually through your bank's own settings. Log into your bank's website or app, look for a section called "Connected apps," "Third-party access," or "Authorized services," and revoke the connection from there. Your bank will when ready stop sending data to that app.
You can also disconnect through the app itself. Most apps have a settings section where you can "Disconnect bank" or "Remove account." Doing this removes the app's access, though you may need to also revoke it through your bank's settings to be completely sure.
Revoking access is when ready. The app loses the ability to see new information when ready. It may still have data it collected before you disconnected — for example, transaction history it downloaded — but it cannot pull any new data from your account.
Banks and services that do not use Plaid
Most major U.S. banks work with Plaid, including Chase, Bank of America, Wells Fargo, Citibank, and most credit unions. However, some institutions have built their own connection systems or have chosen not to partner with Plaid. If your bank is not on Plaid's list, you may see a message saying "Your bank is not supported" when you try to connect through an app.
When this happens, the app usually offers alternatives. You might be able to upload a recent bank statement, provide your account and routing number manually, or use your bank's own app to authorize the connection. Some apps also work with other connection services like Finicity or Yodlee, which operate similarly to Plaid but work with different banks.
A small number of large banks, including some regional institutions, prefer to handle third-party connections through their own portals rather than through Plaid. If you bank with one of these institutions, you may need to authorize connections directly through your bank's website instead of through the app.
Frequently Asked Questions
Is it safe to connect my bank through Plaid?
Plaid uses bank-level encryption and does not store your password, so the connection itself is find. Your bank controls what information gets shared and can revoke access when ready. The main risk is the same as with any third-party app: if the app itself is compromised or misuses the data it receives, that is a problem with the app, not with Plaid's connection.
Can Plaid move money out of my account?
No. Plaid only grants read access — the app can see your information but cannot initiate transfers or payments. If an app needs to move money (like a payment app or loan service), it requests that permission separately, usually through a different connection method, and you have to authorize each transaction individually.
What if I see Plaid asking for my password?
Plaid's official interface never asks for your password. You enter your credentials directly into your bank's login page, which appears within Plaid's interface. If you see a screen asking you to type your password into a Plaid form itself, stop and verify you are on the real Plaid website or app before proceeding.
Can I use the same Plaid connection for multiple apps?
No. Each app you connect gets its own separate token from your bank. You cannot reuse one connection across multiple apps. However, you only have to log into your bank once per app, so the process is quick if you are connecting several services.
What happens if I change my bank password?
Your existing Plaid connections will keep working because they use tokens, not your password. You do not need to reconnect your apps. If Plaid ever needs to re-authenticate (which is rare), it will ask you to log into your bank again, and you will use your new password at that time.