Security
Security you can see
Your finances deserve more than a password. Here's how Entifold keeps your account and your data protected, and how it keeps you informed.
Connections through Plaid
- You connect your financial institutions through Plaid, a service used by thousands of financial apps.
- Your financial institution's username and password go to Plaid, never to Entifold.
- Disconnecting an institution removes its accounts and history from Entifold.
Strong sign-in
- Every account has a verified email address and a verified phone number.
- Sign in with a passkey, using your device's fingerprint, face or PIN.
- Add two-step verification with an authenticator app, with backup codes in case you lose your phone.
- After repeated wrong passwords, signing in also needs a code sent to you.
Important changes need your password
- Changing your password or two-step verification asks for your current password.
- Making someone an admin and deleting a workspace ask for it too.
Every session in view
- See every browser and device signed in to your account.
- Sign out any session you don't recognize, at any time.
Told when it matters
- We email you about a sign-in from a device we don't recognize, and whenever your passkeys or two-step verification change.
- These emails can't be turned off, so you always hear about them.
Permissions for every member
- Each workspace member has a role: owner, admin, editor or viewer.
- Only the owner can manage billing or delete the workspace.
An activity log for each workspace
- Owners and admins can review who did what, from connecting an account to changing a member's role.
Encrypted connections
- Every connection to Entifold, and from Entifold to its database, is encrypted.
Found a security issue?
Please tell us at [email protected] before sharing it with anyone else. Include what you found and how to reproduce it, and we'll get back to you quickly.
Get your finances in one place
Start free in a few minutes. No card needed.