What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
After linking a budgeting, investing or payment app, open your bank’s own security and data-sharing controls and verify every connection. Confirm the app’s identity, accounts and permission scope; revoke anything you do not recognize or no longer use; determine whether the app received a secure authorization or your bank credentials; then update your password, multifactor authentication, alerts and account-recovery details as needed.
Disconnecting an app usually stops new data requests, but it does not automatically erase information the app already copied. If the app ever received your bank username or password, changing that password is the safest response. The exact menu names and available controls vary by bank, account type and device, so use the bank’s current instructions and contact it immediately if you see unauthorized activity.
As an Amazon Associate I earn from qualifying purchases.
Why a connected-app review matters
A financial app can be useful without needing permanent, unrestricted access to a bank account. The risk depends on how the connection was made, what data was authorized, how long the authorization lasts and whether you can see and revoke it from a bank-controlled page.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →A connection made through the bank’s secure authorization or data-sharing system normally creates a record in a linked-app, connected-services or data-sharing list. A connection made by typing your bank username and password into an app is different: the third party may be able to sign in as you until that password changes, and the bank may not show it in the same linked-app list.
#1 Best Overall
Reviewing the controls is not an admission that an app is unsafe. It is a way to reduce dormant access, catch an unfamiliar connection early and make sure the account is protected by strong authentication and timely alerts.
1. Open the bank-controlled linked-app list
Find the correct page
Sign in by typing the bank’s known web address yourself or by using its official mobile app. Look under areas labeled Security Center, Security & Privacy, Connected apps, Linked apps, Data sharing, Third-party access or Authorized applications. Labels differ by institution, and a business, joint or retirement account may expose a separate control page.
For example, Chase tells customers to review and remove access for specific apps or websites under “Linked apps” in its Security & Privacy Center on chase.com or in the Chase Mobile app. That is an example of the control to look for, not a universal menu path.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Record what each entry says
For every entry, note the company or app name, the specific bank accounts involved, the permission categories, the date it was authorized and any expiration or renewal date. Save a screenshot or export the list if the bank permits it. A connection can be legitimate even when the displayed name is a data provider rather than the consumer-facing app you remember.
- Identity: Does the legal or service name match an app you intentionally connected?
- Accounts: Is access limited to the checking, savings, card or investment account you selected?
- Data scope: Does it read balances and transactions only, or can it initiate payments, transfers or profile changes?
- Timing: Is the last-authorized date consistent with when you set up the service?
- Duration: Is access one-time, recurring, or indefinite until you revoke it?
Reconcile the list with your own records
Compare the bank’s list with the apps currently installed on your phone, the services in your password manager and your recent email confirmations. Do not rely on memory alone: an app may have been renamed, sold or bundled into another service. If you cannot identify an entry, treat it as untrusted until the bank or the provider confirms it through a verified support channel.
2. Revoke stale or unrecognized access
Use the bank’s revoke control first
- Open the linked-app or data-sharing entry.
- Read the permission summary and select Remove access, Revoke authorization, Disconnect or the equivalent control.
- Confirm the action when the bank asks you to do so.
- Return to the list and verify that the entry is gone or marked revoked.
- Keep the confirmation number, email or screenshot with your account records.
Under CFPB Regulation §1033.331(e), a provider must offer a reasonable method for a consumer to revoke access and must revoke access after the consumer requests it. The practical interface and processing time still depend on the provider, so check the status rather than assuming the click completed the change.
Rank #2
What to do when the bank cannot revoke it
If the entry is locked, produces an error or remains active after the stated processing period, contact the bank using the phone number on your card or a message channel inside the authenticated website. Give the representative the app name, account affected, authorization date and the time you attempted revocation. Ask whether the connection uses the bank’s secure data-sharing system or a credential-based sign-in and whether the bank can place a temporary block while it investigates.
Also cancel the connection inside the financial app. That prevents the app from automatically requesting a new authorization, but it does not replace the bank-side revocation. If you suspect fraud, ask the bank whether additional steps such as a new account number, transaction review or fraud claim are appropriate.
3. Understand what happens to data already shared
Revocation normally stops future access; it is not the same as deletion. Bank of America explains that after consent is revoked, a third party can no longer access account information through that authorization but may still retain data it previously received. To remove that historical data, you must contact the third party and request deletion under its privacy process.
Ask the provider focused questions
- What account and transaction data did you receive?
- What copies remain in active systems, backups or reports?
- What is the retention period and legal reason for keeping records?
- Will deletion cover derived categories, such as spending labels or a financial profile?
- When will deletion be completed, and how will you be notified?
Send the request through the provider’s authenticated support or privacy channel, not an unverified email address. Keep the ticket number and the provider’s response. Deletion rights and retention exceptions differ by jurisdiction and by the provider’s legal obligations, so a request may not erase every record immediately.
4. Determine whether the app had your bank password
Secure authorization versus credential sharing
| Connection method | What you entered | Typical control | Main concern after disconnecting |
|---|---|---|---|
| Bank OAuth or secure data sharing | You authenticated on a bank page or bank-hosted window and approved stated permissions. | A bank-linked-app or data-sharing entry with a revoke button. | Previously copied data may remain with the app. |
| Direct credential sharing | You typed the bank username and password into the third-party app or its embedded sign-in. | The bank may not display a normal linked-app record. | The credentials may remain usable until the password changes; copied data may also remain. |
Look at the original setup emails and your password manager history. If the app asked for the bank’s actual username and password, assume the credential was exposed to that third party even if the service was reputable at the time.
Change the bank password when credentials were supplied
Bank of America describes changing the bank password as the safest step when a third party accessed information with the customer’s login credentials. Change it from the bank’s official website or app, not from a link in an email. Use a long, unique password that has never been used for email, shopping or another financial service. Afterward, sign out of other sessions if the bank offers Sign out everywhere or Manage devices, and update only the legitimate apps that still need access through the bank’s secure authorization flow.
Changing a password can disconnect mobile banking, bill-pay software or account aggregators. Reconnect each service deliberately and check its permissions instead of automatically approving every request.
5. Strengthen multifactor authentication
The Federal Trade Commission advises starting with sensitive accounts such as banks, credit cards, email, tax-filing sites, social media and payment apps. Turn on MFA in the bank’s security settings and in the email account used for password recovery.
| Factor | Protection and trade-offs | Best use |
|---|---|---|
| SMS or email code | Better than a password alone, but dependent on phone-number or email-account security and vulnerable to some interception and account-takeover tactics. | Use when stronger methods are unavailable; protect the delivery account with MFA. |
| Authenticator app | Generates codes on a registered device without relying on the cellular network. Losing the device can create recovery work. | Preferred over SMS or email when the bank supports it. |
| Hardware security key | Requires a physical FIDO/WebAuthn key and compatible bank, browser and device. It resists phishing because the key does not disclose a reusable code. | Strongest option for a supported account, with a spare key stored safely. |
The FTC states: “Security keys are the strongest method of 2-factor authentication because they don’t use credentials that hackers can steal.” Register the key only through the bank’s genuine security page, test it before removing another factor and store backup codes offline where someone you trust can access them in an emergency.
Recommended Free Tools
6. Review login, transaction and anomaly alerts
Open the bank’s alerts center and enable notifications for events you can act on quickly. Names vary, but useful categories include:
- New login, unfamiliar device or changed device registration
- Password, email address, phone number or security-setting changes
- New payee, external account or biller added
- Transfers, wires, ACH transactions, card-not-present purchases and large withdrawals
- Low balance, overdraft or unusual spending thresholds
Choose a delivery method you monitor continuously. Push notifications can be fast, while email provides a searchable record; SMS may be the only option for some events. Confirm that alerts are enabled for every account and not merely for the primary checking account. Review the bank’s recent-login and transaction screens even when no alert arrived.
FFIEC interagency authentication guidance, published August 11, 2021, discusses fraud and anomaly detection, suspicious-behavior monitoring and timely notification of unauthorized access. Those controls supplement, rather than replace, your own review. If an alert shows a login or transfer you did not make, use the bank’s fraud number immediately and avoid interacting with links in the notification.
Rank #4
7. Verify the app and website before granting access
The FDIC’s “Banking With Third-Party Apps,” published June 2024, warns that fake bank sites and apps can steal information or install malware. Before connecting a service, verify the developer, read the requested permissions and make sure the sign-in page belongs to the bank rather than a look-alike domain.
Checks that prevent common mistakes
- Install the bank app from the official app store listing and inspect the publisher name.
- Open the bank by typing its known address or using a saved bookmark; do not follow an unexpected message link.
- Check the spelling of the domain and the browser’s security indicator, while remembering that HTTPS alone does not prove legitimacy.
- Reject permissions unrelated to the service’s purpose, such as transfer authority for a read-only budgeting function.
- Use FDIC BankFind to verify a bank’s official website when a link or app listing looks suspicious.
If a third-party app asks for your bank password on its own screen, stop and ask whether the bank offers a secure authorization alternative. Do not install an app that requests broad device permissions unrelated to account aggregation.
8. Clean up recovery settings and trusted devices
Password security fails if an old phone number, email address or trusted device can reset the account. In the bank’s profile and security pages:
- Remove phones, tablets, browsers and computers you no longer own or use.
- Delete old phone numbers and email addresses, then verify the replacements.
- Review trusted-device, remembered-browser and “do not ask again” settings.
- Check recovery codes and regenerate them if they may have been copied.
- Enable MFA on the recovery email account and protect the mobile carrier account with a separate account PIN where available.
Do not remove your only recovery method until a replacement has been tested. If you share a joint account, confirm which owners and devices remain authorized; removing a device from your profile may not remove another owner’s access.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.9. Use a repeatable review schedule
Perform a full review when you first connect an app, after a password change, when you sell or replace a device and whenever an app changes ownership or features. A quarterly check is a practical minimum for people who use several financial services; review immediately after any suspicious alert.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problems- Every review: linked-app inventory, permission scope, last-authorized date and trusted devices.
- After disconnecting: bank-side revocation status, provider deletion request and confirmation of no new data pulls.
- After suspected exposure: password change, session sign-out, MFA reset, alert review and direct contact with the bank.
10. Troubleshoot common situations
The app is not shown in the bank’s linked list
It may use credential sharing, a separate card or investment platform, or a connection that has already expired. Check the app’s account settings, search your email for authorization notices and ask the bank which data-sharing provider handles the connection. If credentials were used, change the bank password before investigating further.
Revocation succeeded, but the app still displays old transactions
That display may be a cached copy. Confirm that the bank shows the authorization as revoked, then request deletion from the app and ask when its cache and backups will be cleared. Watch for new transaction dates; new data appearing after revocation warrants a call to the bank.
You cannot receive the MFA code
Use an already registered authenticator or backup code if available. Otherwise follow the bank’s identity-verification process through a known channel. Do not disable MFA permanently just to restore access, and do not give a one-time code to a caller or support message that contacted you unexpectedly.
You see an unfamiliar transfer or login
Contact the bank immediately using the number on the card or inside the official app. Ask it to secure the account, investigate the event and explain whether a password reset, new account number or payment recall is necessary. Preserve screenshots and timestamps, but do not delay the call while collecting evidence.
Quick post-connection checklist
- Open the bank-controlled linked-app or data-sharing page.
- Match each app, company, account, permission and authorization date to your records.
- Revoke stale, duplicate or unrecognized entries and confirm the status changed.
- Ask the provider to delete previously shared data; keep its response.
- Change the bank password if the app ever received your credentials.
- Enable MFA, preferring an authenticator app or supported security key over SMS or email.
- Turn on login, new-device, password-change, payee, transfer, card and balance alerts.
- Verify the app, bank website and requested permissions before reconnecting.
- Remove old trusted devices, phone numbers, email addresses and recovery codes.
- Monitor the account for new logins and transactions after the review.
Frequently Asked Questions
Will uninstalling a financial app remove its access to my bank?
No. Uninstalling removes the app from your device but may leave the bank authorization active. Revoke the connection from the bank’s linked-app or data-sharing page, then request deletion of previously received data from the provider.
Do I need to change my password after every secure bank connection?
Not usually. If you authenticated on the bank’s own authorization page and never gave the app your bank password, review and revoke permissions instead. Change the password promptly when the app received the password, the sign-in method is unclear, or you see suspicious activity.
Can I use a security key with any bank?
No. FIDO/WebAuthn support depends on the bank, browser, device and account type. Check the bank’s current MFA settings, register a backup factor and test the key before relying on it.
How long should I keep evidence of a revoked connection?
Keep the revocation confirmation, provider deletion request and any support case until you have reviewed subsequent statements and are satisfied that no unauthorized access or transactions occurred. Banks and providers set their own record-retention periods.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
