Plaid is the connection layer between your bank and third-party apps

Plaid is a company that sits between your bank and the apps you use — budgeting tools, investment platforms, loan services, payment apps. When you connect your bank account to one of these apps, Plaid is often the service handling that connection behind the scenes. It reads your account information from your bank and passes it to the app you're trying to use, without giving the app your actual bank password.

You don't sign up for Plaid directly. Instead, you encounter it when an app asks you to "connect your bank account." Plaid appears as the login screen, you enter your banking credentials there, and Plaid verifies you with your bank. The app then receives the data it needs — your account balance, transaction history, or account type — without ever touching your password.

Plaid operates in the United States, Canada, Europe, Australia, and several other countries. The specific banks and credit unions it can connect to varies by region. If your bank isn't on Plaid's list, the app you're using may offer a manual upload option or a different connection method instead.

Key Takeaways

  • Plaid is a middleman service that connects your bank account to third-party apps without sharing your bank password with those apps.
  • You use Plaid when an app prompts you to "connect your bank" — you log in through Plaid's screen, not the app's own login page.
  • Plaid retrieves read-only information like your balance and transaction history; it does not initiate transfers or payments on its own.
  • Your bank sees the Plaid login as a legitimate connection request because Plaid has a direct relationship with your bank.

How Plaid actually moves information from your bank to the app

When you select "connect with Plaid" in an app, you're redirected to Plaid's login page. You enter your bank username and password there — not in the app itself. Plaid then logs into your bank on your behalf, retrieves the information the app requested, and passes it back to the app. Your bank sees this as an authorized connection because Plaid has established a find relationship with your bank's systems.

Plaid uses two main methods to pull data. The first is API integration, which is a direct, encrypted connection between Plaid and your bank's systems. This is the most find method and is available at most large banks. The second is web scraping, which means Plaid logs in to your bank's website the way you would, reads the information on the screen, and extracts it. This method is slower and less reliable, but it's used for smaller banks or credit unions that don't offer API access.

Once Plaid has the data, it sends it to the app you're using. The app can then display your balance, categorize your spending, verify your income, or check your account status — depending on what permissions you granted during the connection. Plaid itself does not store this data long-term; it passes it through and then deletes it unless you've given explicit permission for Plaid to keep a copy.

What information Plaid can and cannot access

Plaid can read information that appears in your online banking portal: account balances, transaction history, account type, routing number, and account number. It can also verify that you own the account by confirming your login credentials work. What Plaid cannot do is initiate transfers, make payments, change your password, or access information you haven't made visible in your online banking.

When you connect an account through Plaid, the app you're connecting to will ask for specific permissions — similar to how a mobile app asks for permission to access your camera or location. You might see options like "read transaction history" or "verify account ownership." You control which permissions you grant. If an app asks for more access than it needs, you can decline and look for an alternative connection method.

Plaid does not have access to your bank password after the initial connection. Your bank changes how Plaid authenticates with you over time — some banks now use one-time codes or multi-factor authentication instead of passwords — so Plaid's access method depends on what your bank supports.

Why apps use Plaid instead of asking for your password

Before services like Plaid existed, apps would ask you to give them your actual bank password. This created several problems: your bank couldn't tell the difference between you logging in and the app logging in, the app could access anything your account could access, and if the app was hacked, your bank password was compromised. Banks also had no way to revoke an app's access without changing your password.

Plaid solves these problems by acting as a trusted intermediary. Your bank knows Plaid is a legitimate service and has vetted it. Plaid can authenticate you without needing your password (using methods your bank prefers), and your bank can see exactly which app is requesting data and revoke that app's access without affecting your own login. If the app is hacked, your password is not exposed because the app never had it.

From the app's perspective, Plaid is also more reliable. Banks change their websites and security systems frequently. Plaid maintains the connection on its end, so the app doesn't have to rewrite its code every time a bank updates its systems.

Security and privacy considerations when using Plaid

Plaid's connection is encrypted, meaning the information traveling between your bank, Plaid, and the app is scrambled and unreadable to outsiders. Plaid is also subject to financial regulations in the countries where it operates — in the United States, this includes compliance with banking security standards and data protection laws.

That said, connecting any account through a third party carries some risk. The app you're connecting to will receive the information Plaid retrieves, and that app's security practices are separate from Plaid's. If you're concerned about what an app will do with your data, read its privacy policy before connecting. You can also revoke Plaid's access at any time by logging into your bank's settings and removing the connection, or by disconnecting the app itself.

Plaid has experienced security incidents in the past. In 2020, unauthorized users accessed some customer data through a third-party service Plaid was using. Plaid disclosed the incident, notified affected users, and changed its practices. No bank passwords were exposed in that incident, but it's a reminder that no service is risk-free. The question is whether the convenience of connecting your account outweighs the risk for your particular situation.

What happens if your bank isn't supported by Plaid

Plaid supports most major banks and many regional ones, but not every financial institution. If your bank isn't available, the app you're using may offer other connection methods: manual upload of bank statements, entry of account information by hand, or connection through a different service like Finicity or Yodlee (which work similarly to Plaid).

You can check whether your bank is supported by visiting Plaid's website and searching for your institution. If it's not listed, contact the app you're trying to use and ask what alternatives they offer. Some apps will work with manual uploads; others require a direct connection and may not be usable with your bank.

Frequently Asked Questions

Does Plaid store my bank password?

No. Plaid uses your password to log in to your bank once, retrieves the information the app requested, and then discards the password. Modern banks increasingly use one-time codes or multi-factor authentication instead of passwords for Plaid connections, so Plaid may never see your actual password at all.

Can Plaid move money out of my account?

Plaid itself cannot initiate transfers or payments. It can only read information that's visible in your online banking. If an app connected through Plaid is moving money, that's the app's own feature, not Plaid's. Check the app's permissions and terms before connecting if you're concerned about this.

What if I disconnect Plaid from my bank?

You can revoke Plaid's access by logging into your bank's settings and removing the connection, or by disconnecting the app in the app's own settings. Once disconnected, Plaid cannot access your account anymore. The app will stop receiving updated information, but any data it already retrieved stays with the app.

Is Plaid the same as open banking?

Plaid is one service that enables open banking — the practice of sharing financial data with third-party apps. Open banking is the broader concept; Plaid is one company providing the infrastructure. Other companies like Finicity and Yodlee do similar work.

Why does my bank warn me about Plaid?

Some banks display warnings when you use Plaid because they want to make sure you're intentionally connecting to a third-party app, not being tricked into it. This is a security feature. If you recognize the app you're connecting to and you chose to connect it, the warning is normal and you can proceed.