Is it safe to connect ChatGPT to your bank account?

There are three ways to get your bank data in front of ChatGPT, and each carries a different kind of risk. Finances is ChatGPT's built-in feature, which links accounts through Plaid and, separately, credit report data through Experian. Apps from ChatGPT's plugin directory, such as Candor Finance, bring their own access that you approve. The third is downloading statements and uploading them to a chat.

The rest of this page takes the questions people ask before connecting one at a time, with what OpenAI and Plaid say about each.

Reading is still exposure. A connected ChatGPT can tell anyone who opens your account what you earn, where you shop, and what you owe. That is why the settings below matter more than the link itself.

Plaid handles the bank sign-in. Plaid says it does not share your bank username and password with the apps you connect, and it encrypts data in transit. OpenAI says ChatGPT shows only what your bank makes available, so some accounts connect with balances but not full history.

Temporary chats are the other option. OpenAI says a temporary chat cannot reach your connected accounts, does not use or create memories, and does not appear in your history.

If you use Candor in ChatGPT, two policies apply. Candor does not train AI models on your financial information and never sells it. Once ChatGPT reads a figure from Candor, that conversation lives in ChatGPT and follows ChatGPT's setting, so set it there too.

Pick one place for your bank connection. Finances suits quick questions about balances and spending inside ChatGPT. Candor suits working through harder questions over time: it gives ChatGPT the exact figures, finds what's worth talking through and tells it why, and keeps the plans and decisions you approve, for ChatGPT or any other agent you use.

Pick the app permission on purpose. ChatGPT's menu runs from Always ask through Allow read-only tools and Allow low-risk tools to Allow all tools (OpenAI's help center calls them Allow read actions, Allow low-risk actions, and Allow all actions), and OpenAI warns that allowing everything carries elevated risk because supported actions may run without another confirmation. For Candor, Allow read-only tools lets ChatGPT read your records freely and still ask before it saves a note, budget, or goal in your workspace.

Keep personal money out of work accounts. OpenAI says conversations in ChatGPT Business and Enterprise workspaces, including conversations that use apps, are available to the workspace's compliance tools.

Shared family logins are the other common gap. A connected account answers whoever is signed in.

OpenAI says ChatGPT may ask for approval before an app reads information or takes an action. Treat those prompts as the check they are, especially in a conversation that already contains your balances.

For a stricter setting, turn on Lockdown mode under Advanced security in Settings > Security and login. It limits features that can reach the web or outside services, to help protect sensitive data from prompt-injection attacks. The tradeoff is real: Finances and live connectors, including Candor, do not work while it is on. Data controls also has Information shared with apps, where you can manage what ChatGPT shares with the apps you use.

Disconnecting Candor in ChatGPT does not unlink your bank; remove a bank on Candor's Connections page. In Candor, revoke ChatGPT's access in your account controls, and export or delete your Candor data there. Plaid connections you made for other apps are separate; manage those in Plaid Portal.

Bring it the question you've been putting off, like whether you can pay the card down by summer, or bring nothing and ask what deserves a look. ChatGPT works through the figures and tells you what works, what doesn't yet, and what would have to change. Candor is not a licensed advisor and gives no advice; your agent makes the recommendations and you make the call.

ChatGPT facts come from OpenAI's Finances and connected apps help articles and its personal finance announcement, including the October 2, 2026 update, all read on October 6, 2026. Settings paths were checked in ChatGPT on the web the same day. Plaid facts come from Plaid's consumer page. Candor is included because this is Candor's site. OpenAI updates these features often, so check the linked sources and your own settings.