Hacker News Reader

> Mint scrapes the sites and stores passwords in plaintext

Incorrect:

> How secure is my login information I store in Mint?

> Your login user name and passwords are stored securely in a separate database using multi-layered hardware and software encryption. We only store the information needed to save you the trouble of updating, syncing or uploading financial information manually.

Ref: https://mint.intuit.com/how-mint-works/security

View on HN

In other words, Mint doesn’t store your passwords in plain text, it stores them reversibly encrypted. That is indeed better, because if someone hacks Mint’s database they might not be able to read your passwords. However, it has the same problem as plaintext passwords that if someone at Mint is untrustworthy, they can decrypt your password and pretend to be you. That system makes it inconvenient for you to protect your accounts (you would have to memorize new passwords for all of them) and difficult to apply for restitution later (because it looks like you were the one who logged in).

Reply on news.ycombinator.com