How crucial are banking apps? Your experience with them vs. browser banking?
Banking apps seem to be a motif among things that don't play well with privacy ROMs. My bank's website does everything I could want out of it. I think I might be ignorant to something.
What about banking apps is especially compelling?
How often do banks put must-have features behind an app?
And should I be concerned that banks might move away from offering services through browsers?
Can't do anything about mobile deposits, but for notifications, you could get the notifications emailed to you and your email app has push notifications.
I mean, they could offer it through the browser. All modern browsers have more than enough hooks and permissions control to do something as simple as take a couple pictures and make a basic request to a back end.
It's a must for me. My phone is my primary day-to-day computer, so I need to be able to so everything from that. Unfortunately that is also why I'm not using graphene OS, because our government 2FA system doesn't work in graphene OS (even with play services installed) so it's impossible to do anything. I can't check anything WRT banking, schools, taxes, daycare, doctors appointments, hospital record or change anything that requires the involvement of city hall, including checking digital mail from the municipality or government. It's basically not possible to function in our society without it.
For banking and other official business, they have to go physically. If their bank has no physical department near them well then it sucks to be them. For digital mail you can apply for exemption and you will get physical letters.
You can order a digital code generator so you don't need the app if you still want 2FA for digital handling. But I don't want to have to carry that with me it would be a significant inconvenience for me.
Depends on the country. I'm teaching in Thailand and here you can't do any banking through a browser. You can only use the bank's official app and you don't even have a login/password for it, you have to go to the bank and activate the app in person as a foreigner (I think Thai citizens can do it online but foreigners have to do it in person). Nobody takes actual cards for the payment and you pay everywhere by scanning QR codes which has to be done through the app. If you buy a new phone you have to activate the app again at the bank's office. It's really annoying and the reason I probably can't go with GrapheneOS or any other custom roms because the bank app is absolutely essential.
Mobile check deposit is the only thing I want from my bank's app.
I'm running LineageOS with Magisk and Play Integrity Fix. That works for my bank's app, but I'm annoyed that they make me do it and gave their app a 1-star review on Google Play for it.
Zelle is sketchy even when compared to other cash transfer apps. They do a lot of freezing people's money. Don't use them if you have any other option.
Same here, mobile check deposit and Zelle are literally the only things I've ever needed a bank app for.
I used to never use Zelle for anything but too many friends/family want to use some sort of app for exchanging money & that's usually what we settle on. And my old landlord wanted rent paid via Zelle so that was another thing that forced me to install a bank app for Zelle purposes.
Mobile check deposit is a requirement when dealing with a bank without any locations nearby. In practice I only need to use that once a year or so, checks are kind of rare nowadays unless you're a business owner with clients/customers paying with checks.
Usually not worth it, the website usually has everything.
I've been surprised by how many banking apps I've seen that don't require safteynet or google services (I thought basically all of them would require it). Some banks websites don't work very well on mobile, so that's some peoples reasoning.
My bank's 2FA works only via their app or via SMS. For SMS I would have to pay per each received SMS.
The app perfectly works without safetynet, with microG, rooted with magisk but hidden by zygisk, so I'm lucky. At one update they added a popup at start after login about asking to add my card to Google Wallet (or whatever it's called nowadays), and it's not implemented in MicroG, so I can't open it since that version. I just downgraded to the last working version and blacklisted its upgrades in Aurora, and I hope they won't block my old version in the near future.
It's a very progressive small local bank, I will contact them about this issue if they block my old version to make that dialog optional.
The banks here provide digital ID verification online. You use it to log into tax services, the national health-care database, to apply for schools, other education-related stuff, apply for welfare, register trade names... etc. The list goes on and on.
Stuff you'd otherwise have to personally visit or mail documents to offices of various government institutions for, can be done extremely smoothly online.
With my bank, the app is used for one of the verification steps. When verifying your identity online, you need to authorize the login from the app by entering a PIN from memory when prompted. There are alternatives but this is by far the most convenient.
The same banking app also notifies me the second any money comes into or leaves any of my accounts. No transactions can occur without my knowing. It lets me know when I receive my pay, or when an electronic invoice comes in (power, phone bills, etc. come right into the app), gets automatically paid, or when explicit authorization is needed due to one being irregular.
Most of the services my bank provides can be accessed via browser, but the stuff above is the kind you can't achieve in a browser.
Honestly OP Pohjolas app is so feature-rich I've been able to pretty much set it up to run my finances for me. All I do is keep an eye on my accounts to make sure things are going right.
I remember when I got here it was a nightmare for the first few months when I didn't have strong auth. It took several months to open a bank account and you basically can't do anything without that stuff
Pretty much. Helping my grandmother deal with misplacing or forgetting her login details has been hell a couple times.
It's extremely convenient when just go about your life with it already on hand, but for obvious reasons the security measures are extreme and it's a pain to set up or recover your id.
Depositing checks is about the only useful thing I've seen on my local bank's app, but that only matters if you do business stuff with people who pay with checks.
I don't use them. Web banking works completely fine for me. Back when I did use them, though, I always used them on privacy ROMs/GOS specifically. Went through 4 different banks and all their apps worked fine for me on GrapheneOS. No Google Play services either.
My bank only has an app, no website option, but luckily it works just fine on GrapheneOS with no Google Play. I barely use it anyway as I pay cash everywhere possible
2FA must be done through the damn app. It's TOTP (six digit) but locked behind god knows what. I asked for alternatives and they looked me like I was a caveman.
I don't use them and haven't missed them. I see one of my local branches has ripped out its outdoor ATM's though. Wonder if that's related to moving stuff to apps.
I'm in the UK. I do not use them. I can login via website, and use text as 2FA. I do not need to use it out of the house but have that option if I want.
I pay via bank debit card.
I would be surprised if they app locked features. It would exclude elderly and probably be illegal.
In the UK as well. My bank is pushing the phone app, and making it difficult to use the website without a phone. I will probably change my banking provider soon.
I think your largest banks like your Wells Fargo's and Chase and Discover, etc. are going to take quite a long time to move to app only stuff if ever. However, newer entrants such as chime do lock functionality behind their app and make their websites really terrible. So I would avoid those.
Login with biometrics. Wants password and 2fa each time. As it should, but it gets tedious, especially when I want to confirm online payments (which need to be confirmed inside the interface after you login).
No contactless payments. You can enroll a card into Google Pay but fuck Google, I don't want them seeing what I buy.
No notifications, hope the bank is willing to send SMS instead.
Bit more tedious to send money to someone because the website can't look up contacts by name, have to look them up separately and copy the phone number over.
I've never used a mobile banking app. Been using smartphones since they became generally available. I don't need any payment apps and I generally don't do anything important on my cellphone except for communications.
Website here is awful. Paste is disabled, itâs not optimized for mobile, itâs a PitA to use, & there is literally code to check if the user is running Netscape Navigator 4. The site has a weird encoding that doesnât allow English punctuation, & to change your email or phone number requires physical documents, ID, & a wait period. The app is poorly coded & doesnât work if you have root, are running a custom ROM, (& likely if you donât have Google services)âso I do just use the site. âŠBut if we are being real, I actually always keep cash on me & cash is preferred so while the problem is still relevant, needing the app/site isnât dire.
What is really missing for my country on the site is QR code scanning for bank-to-bank transfers that a lot of vendors use & to do some bill payment. For instance, while I could set up the electric bill to auto-debit, my internet bill only has QR scan without a physical bank number I could transfer to (& the short list of utilities doesnât include my net)âso I take a 25-minute bike ride in the heat once a month to pay that bill but I reward myself by getting to swing by the nearby-ish Hong Kong pie bakery to get a treat & a latte to make out-of-the-way trip feel worth it.
When I do have to use the site & since there is no QR code scanning, the workflow is:
Login (I have a script to block their paste-blocker to use my password manager)
Create a new recipient which requires a unique name, the account number + their banking service provider, phone or email, and 12-digit SMS 2FA code (no TOTP or FIDO2 option); this process is done on a desktop-only site which is hard to work with
Confirm that with email
Go to transfers, select my from account (despite me only having one account & no default preference option), find that user I created, fill in an amount, do another 12-digit 2FA
Then they want to take a picture of my phone after the transfer for whatever reason
reason
This process due to bad UX can take up to 10 minutes if they are not ready. So the tl;dr is to carry cash or hope an ATM is nearby.
I had discussed it with a local & he said there has been more push towards cashless brought on by businesses/government wanting to track everything & tourists demanding their privacy-invasive âcomfortsâ like $BIG_TECH_PAY & $CREDIT_CARD options despite most folks being fine with cash. Cryptocurrency is basically never accepted either.
If the day comes where I donât have a choice, I will start carrying a second device with nothing but banking & similar nonsense that prevents my freedom to do what I want with the device I own. OP knows the website experience matter since it not only gets ported to platforms outside the mobile monopoly but sandboxes the banks for spying on your device & asking questions that arenât their business like if I run an unGoogled ROM. Good thing there was a mass of pushback against Google trying to add attestestion to Chromium ore weâd enjoy the same nonsense on the web too where Iâm sure Linux would be block by these goobers.
I don't run an OS on my phone or laptop that could run a proprietary banking app in the first place. Can't be inconvenienced if you don't know what convenience feels like in the first place.
Seconded and I DO NOT use Google services. So I consider it atleast for banking unnecessary. Apps say they require it. But its usually for Push notifications. Mine work just fine without it. YMMV.
âą Convenience, no need to waste time and car fuel going back and forth to the bank all week as i get a lot of cheques and i can just deposit straight after reception from my phone itself
âą Mine put new ones in all year round as its not really a bank, kind of the same but it's a "caisse populaire" in my language.
âą Not really. If they offer it to mobile, they'll offer it to computers always.
The only time I've willingly used a banking app is when they lock out my VPN IP. In those cases the app still usually works for whatever reason. So far, I haven't found any functionality missing from the webapp, but I'm also dealing with brick and mortar institutions.
I would be concerned as they will eventually probably move to a phone app first ecosystem, however it will probably take a while. Some people are still only using in person and phone banking (where you call them and punch in numbers).
I live in the Netherlands, where there's a QR-code-based payment method called iDeal, which you need a Dutch banking app or little code machine thing to use. With my bank, at least, there are a few things you can do with the website that you can't do with the app, but for day-to-day use the app's fine.