Would love to have data exported as a CSV - makes analysis much easier as data is largely in a format ready for processing.
Monzo Labs: Export your data š
A little worried that the emailed link has no authentication. Email is fundamentally a plain-text transmission after all (effectively āback of a postcardā unless you add PGP or similar on top), so anyone who snoops that link can access the entire data dump silently with no barriers.
1 Like
Have I misread how this is to work?
I would never have my personal data being zipped and sent by email - email is insecure and having my financial data lobbed about on email, for me is a no-no.
Could you not send a Push, with an authenticated/tokenised S3 URL (time-limited, set for say, 10 minutes from when the Push is accessed) which will allow users to download it from there within that time?
3 Likes
And for everyone who wants more security there is one person who doesnāt mind.
At present itās emailed, but I agree, a better more secure option would be welcomed for this!
Arenāt you currently emailed a secure download link which expires in a few days?
Youāre personal data isnāt actually on the email.
1 Like
Thatās correct. You get 7 days to download.
Although an expired link currently points you to an unstyled XML file. Itās still clear the request has expired.
1 Like
But a URL to the data is, with zero authentication on that link. Effectively the same as being sent plaintext.
1 Like
I see what youāre saying, but I think having an emailed link which expires is fine if you need authentication in your Monzo app to send that link.
A potential issue with asking for PIN/fingerprint authentication from the email link is it could lead to phishing scams. I wouldnāt be super comfortable entering my PIN outside of a card terminal, ATM or my banking app.
However, I do think the current implementation could be improved from a privacy perspective:
-
There should be a limit on the number of downloads allowed before you need to request a new link.
-
The download link should expire after a shorter amount of time. I believe links are currently active for 7 days. 24 hours seems long enough for someone to download their data.
It doesnāt matter that triggering the email is authenticated, the result is a link sent in a plaintext transmission medium accessible with no authentication. Anything transiting the internet unencrypted should be considered public, encryption and authentication are the only guarantees of security. Limiting the number of downloads or availability time does nothing to solve that and is pure security theatre.
Either the data export needs to be held behind an authentication prompt (e.g. the same sort of allow-access in-app trigger as used with 3D secure, or a one-time password delivered through the app, etc) or the dump should be delivered through the app for the user to then move manually (either through USB data transfer, encrypted fileshare, etc).
1 Like
Wouldnāt someone need to login to your email to access the email, which is a form of authentication?
Surely, if the number of downloads is limited to 1 then it is an additional security measure. If you request the email, then download the data a person who has access to the email would then be unable to download it themselves.
Limiting the availability time is also an additional security measure. If the availablilty time is 24 hours, your data is only vulnerable from an email account hack if the hack takes place within 24 hours of your requesting the files from Monzo.
From what Iāve read there appear to be three places where an email could be intercepted:
-
From the senderās computer to the senderās email server.
-
From the senderās email server to the recipientās email server.
-
From the recipientās email server to the recipientās computer.
Number 1 shouldnāt be an issue. I hope Monzo encrypt emails when they are sent from the Monzo ācomputerā which generates the email to the server which sends the email, since I imagine the process used is similar to the one used for the Magic Link logins.
Number 3 shouldnāt be an issue. You can check if your email provider has an encryted connection with your computer by looking at your address bar for the lock symbol. If your email provider does not provide encrypted connections (and, as far as I can, tell they all do) you should change email provider since any personal information sent form using that email provider is vulnerable.
If numbers 1 and 3 are not issues, then number 2 isnāt an issue if Monzo can encrypt emails that they send to other email servers, which I imagine they can to meet regulatory requirements for Magic Link logins.
NB: Iām by no means an expert in this, please point out anything Iāve got wrong.
If Iām wrong about the above points and the current method does prove to be significantly vulnerable, then the in-app trigger sounds like the best solution to me - having to type a password is a pain and downloading the data directly to your phone then moving it across could prove troublesome.
No, this is my point. Email is not a secure transmission medium. If it were analogous to postal mail, it would be a postcard. Any server between the originating server and your mailserver, and anyone viewing packets travelling between those servers, can read the entire contents of an email message. This is why download number or time limitations are meaningless vs. a man-in-the-middle who can access the link at the same time (or before) you do so.
STARTTLS is better than nothing, but itās effectively a pinky-swear on the part of the sending and receiving servers to comply. If an email is sent and STARTTLS is not used (i.e. a perfectly valid transport and the standard for email, so it only takes one intervening relay or gateway to be the weak link in the chain), then by the time it has arrived in your mailbox and you see it was not encrypted during that portion of transit it is already too late and the data is public. Even with DANE it only takes one misconfigured or malicious server in the chain to ignore the request for TLS for plantext to leak.
2 Likes
Good point. However, time & download limits do provide security for cases where someoneās email account is hacked rather than their emails being intercepted.
Sorry if Iāve misunderstood (all the acronyms are confusing), but I donāt understand why encrypted email (as I described previously & repasted below) is not sufficiently secure.
Short version: email is unencrypted by default, and any encryption added is voluntary and reliant on each server handling your email to agree to encrypt it for that hop. i.e. encryption can be requested, but cannot be enforced, and is not end-to-end.
2 Likes
Iām not sure if this is the feature Iāve been using, because the file is generated on my iPhone and then uses the standard iOS share sheet to choose destination - no need for emails.
My change request is to be able to specify a start date. Iāve exported the data to MoneyWiz using the Quicken export filter, but that makes incremental data importing very difficult - you need to use an intermediate app to remove all the transactions that have already been imported or manually delete them one by one, which is completely impractical.
It sounds like youāre downloading a bank statement rather than the āExport your dataā feature currently available in labs.
Your post would probably be better off here:
Sorry if this has already been mentioned or asked, but it seems odd the transaction data doesnāt include the category or comments. I use these to mark business expenses for self assessment throughout the year and without that in the data I have to go back through it all again. Transaction attachments for receipts would also be pretty useful.
Is this going to be updated to include your old intercom chat? Right now itās just your current chat.
This is a step in the right direction but doesnāt go nearly far enough.
The whole reason I joined Monzo was to get greater visibility on where Iām actually spending my money. Iād like to have a dashboard where I can see my categories and ask for different visualisations of spending in each category (more than the coloured wheel).
Currently, I have to search for each category, then download that data as a csv, then compile all that back into a spreadsheet to see how much Iām spending on average each month on each thing. Which takes ages.
I was really hoping this data download would, at the very least, split out the spending into the different categories.
Just tried this on Android.
Along with the excellent feedback of getting a CSV export for transactions, another interesting thing I noticed is that the HTML export has transactions even from 2017 marking as ā(pending)ā which seems odd.
I like the idea of being able to export data, and i do have 2FA enabled on my email account. But i would still prefer to have some password encrypted archive sent to me rather than plain zip file.
Or have the option to export it to telegram for example, which i know to be a more secure environment than generic email.
This could be a password that is stored in the monzo app? So the email delivers with the pwd that is created and stored in the app?