Skip to main content
M
marcmanna941
February 5, 2023
Question

"Password is too long" for bank feed

  • February 5, 2023
  • 1 reply
  • 0 views

I recently made a routine change to my online banking password as per standard best practices.  I also use a password manager allowing me to generate and use long/random passwords for increased security.  During the most recent password change, I changed my online banking password via my bank's website to a random one that is 19 characters in length.  The following day, I received a bank feed error in QBO, which is expected, due to the password change.  When trying to go to the process to 'reconnect' my bank feed connection in QBO, I received a message stating "Password is too long."  I reset my password at my bank again, shortening it to 16 characters, and once again, received the "Password is too long" message.  When I shortened the password again to 15 characters, QBO finally allowed me to enter/update the password and reconnect the bank feed.  At the bottom of that same screen, there's a message that says "At Intuit, the privacy and security of your information are top priorities".

 

Just how much of a priority is my security if Intuit is forcing me to use a SHORTER and LESS SECURE password to connect to my bank?  

    1 reply

    K
    Kurt_M
    February 5, 2023

    Hello there, @marcmanna941. I'll be happy to discuss how we value our customer's security here at QuickBooks Online (QBO).

     

    Before we dig deeper into this, know that I understand you have your personal preferences concerning choosing a secure password for your accounts. Intuit values the safety of your business more than anything else. It's our top priority to ensure all data you've given us is intact and secured. It's the main reason we follow a strict set of guidelines and practices to protect all of your private information.

     

    Also, Intuit insists you use a shorter password to make it more manageable.

     

    For more information about how we value your data and privacy, feel free to visit this page: Security.

     

    To add up, I'm leaving this article to help you manage your bank transactions in QBO: Categorize and match online bank transactions in QuickBooks Online.

     

    If you got free time to spare, you can also scan this helpful article to learn more about reconciling an account: Reconcile an account in QuickBooks Online.

     

    It's been a pleasure to have you here today, @marcmanna941. You are always welcome to post here again if you have any additional Questions related to QuickBooks or need help performing specific tasks inside your company account. I'll be here, ready to assist you again. Take care, and have a nice day!

    M
    marcmanna941Author
    February 5, 2023

    I'm not sure why you're providing me with links on how to manage bank transactions or reconcile an account.  I don't have any issue with knowing how to perform those procedures.  I've most likely been using Quickbooks Online longer than you've been employed there and know far more about it than you do.  (I've been using it since 2003, when it was called "Quickbooks Online Edition")

       >> "Also, Intuit insists you use a shorter password to make it more manageable."

    It is absolutely NONE of Intuit's business to decide what is manageable for me, especially when it comes to Intuit intentionally REDUCING the security of my online banking by FORCING me to use a SHORTER PASSWORD.

     

    Since you like sharing links, I've got a few for you, so you can educate yourself, and Intuit Management about how asinine this policy is to intentionally put customers' security at unnecessary additional risk with no benefit whatsoever.

     

    US Department of Homeland Security CISA (Cybersecurity & Infrastructure Security Agency):  Choosing and Protecting Passwords | CISA 

    "The National Institute of Standards and Technology (NIST) has developed specific guidelines for strong passwords. According to NIST guidance, you should  consider using the longest password or passphrase permissible (8–64 characters) when you can." (Please refer to NIST publication SP 800-63B for those specific guidelines which Intuit is not adhering to)

     

    Google Cloud Platform - Security best practices:  Account authentication and password management best practices | Google Cloud Blog    Note section #5, titled "Don't block long or complex passwords"

     

    UC Santa Barbara IT Department - Password Best Practices:  Password Best Practices | UC Santa Barbara Information Technology (ucsb.edu)   "Length trumps complexity. The longer a password is, the better. Use at least 16 characters whenever possible."

     

    May I also recommend you check out Intuit's document on how to keep your customers' information secure, which includes "using strong passwords":  Business Do and Don'ts: Tips for keeping customer information safe | Intuit Security Center 

     

      Terms & ConditionsAccessibility statement