Account Re-Authentication

Why do we make you re-authenticate synced accounts after 90 days?

Strabo provides synced account information services using Open Banking, and under the umbrella of PSD2, the latest Payment Services Directive.

When this was first issued in 2018, it granted users access to their data through an accredited provider, for a period of 90 days. After 90 days, they would have to use Strong Customer Authentication (SCA) to log in again and grant the service provider another 90 days of access.

In 2021, this was updated to make the process much easier, and we've passed that change onto you.

What does this mean?

Instead of forcing users to provide 2+ security credentials to every service provider, you now only need to authenticate via SCA for the first time, which you'll notice when connecting an account. For every period thereafter, after each 90-day timeout you will simply be directed to confirm that you still consent to the service provider having access to your data. A simple "Yes" or "No" will suffice.

This means that even after 90 days, Account Information Service Providers (AISPs) like Strabo can request one-time information tokens from banks without the need for repeat authentication.

What are the advantages of this?

This means that we are able to provide you with an uninterrupted service for periods of longer than 90 days, without requiring you to enter login credentials over and over, while still maintaining the ability to revoke consent of data access.

Of course, if you decide at any other point that you would no longer like to provide data tokens to Strabo, you can delete your account from the dashboard and we will no longer have any access.

This change in process means that you can expect a more seamless user experience that will save you considerable time and effort, without compromising the security of the platform.

If you have any questions about this, you can reach out to us using the chat box in-platform, on socials or directly by email to hello@strabo.app