How Wealthfolio Connect Works
Connect brings automatic broker updates, encrypted device sync, and cloud backups to Wealthfolio. Your working portfolio stays local, and you choose which features to enable.
Brokerage Connect
Sync your financial accounts automatically
Local database
Connect About Aggregators
We use SnapTrade, a SOC 2 Type II certified financial data aggregator, to connect to your brokerages. With OAuth, your brokerage credentials remain with the broker. When OAuth is not available, SnapTrade stores the required brokerage credentials or API keys encrypted. Wealthfolio Connect never receives them. When you connect an account, you're authorizing SnapTrade to access the approved data, which we then fetch and deliver to your device.
How it works
Connect your account
SnapTrade, our SOC 2 Type II certified partner aggregator, hosts the connection flow. OAuth logins happen on the brokerage website; SnapTrade stores non-OAuth credentials encrypted when a broker requires them. Wealthfolio never receives your login details.
Aggregator fetches your data
The aggregator retrieves your account information, holdings, and transactions from your financial institution.
Connect delivers to your device
Wealthfolio Connect fetches the data from the aggregator and sends it directly to the Wealthfolio app on your device.
Stored locally
Imported records are saved in your local database. Automatic updates keep them current; availability and timing depend on your broker.
Device E2E Sync
Keep your devices in sync with end-to-end encryption
True End-to-End Encryption
Your data is encrypted on your device before it's sent, and only your other linked devices can decrypt it. We cannot read your synced data, even if we wanted to. The plaintext encryption keys stay on your devices.
How it works
Link your devices
Pair your devices by scanning a QR code or entering a pairing code. This establishes a secure connection between them.
Data encrypted on device
Before any data leaves your device, it's encrypted with keys that only your linked devices possess.
Encrypted transfer
The encrypted data passes through Connect. We cannot read it. Only your devices have the decryption keys.
Decrypted on arrival
Your other device receives the encrypted data and decrypts it locally. Your portfolio stays in sync across all devices.
Automatic encrypted cloud backups
Included with Connect Basic and higher
- Set up once. On the device or server that should run backups, open Settings → Backup & Export in the profile you want to protect. Save your recovery code somewhere safe outside the app, then turn backups on. Device sync is optional.
- Keep your backup source available. It saves a complete encrypted cloud copy when due, about once a day. On desktop and mobile, keep Wealthfolio open and online with that profile unlocked. A self-hosted server only needs to be running. A missed backup runs when the source returns.
- Recover when you need to. Choose from up to 30 restore points. A linked device with backup access or your recovery code can open them. Cloud restore is available on desktop; self-hosted recovery uses an offline server command. Mobile can create and download copies, but cloud restore is not yet available there.
A backup protects one profile, including its financial records, prices, and database settings. Other profiles and device credentials are excluded. Each Connect account has one backup source; turning backups on from another device replaces it, and the previous device stops backing up. Backups are personal; household members cannot browse your copies. Restoring replaces one destination profile and does not automatically replace data on other synced devices.
Read the backup and recovery guideYour Privacy
What we store and what stays on your device
What we store
Secure tokens from SnapTrade (not your credentials) that let us fetch data on your behalf. Stored with envelope encryption.
Provider account identifiers and your preferences like which accounts to sync. No account names or metadata.
Device name and platform (e.g., "MacBook Pro", "macOS") to identify your linked devices.
Encrypted blobs that pass through our servers during device sync. We cannot read this data—only your devices can.
When you opt in, we store encrypted copies of one selected profile, encrypted recovery information, and the identifiers and timestamps needed to manage them. We cannot open the copies or read your recovery code.
Records of actions (connections added/removed, devices linked) for security. No financial data is logged.
What we never store
Wealthfolio never receives or stores them. OAuth credentials stay with the brokerage; when a broker requires non-OAuth credentials, SnapTrade stores them encrypted.
Broker data passes through Connect to your device. The copies kept for device sync or cloud backup are encrypted before upload and unreadable to us.
Your devices hold the keys that open your encrypted sync and backup data. Only encrypted key information is sent to Connect.
Save the code outside Wealthfolio. We cannot reset it for you if you also lose access on every device.
You're in Control
Disconnect or revoke access anytime
Go to Broker Connections in the app and click Remove on any connection.
Go to Settings > Devices and unpair any device you no longer want synced.
Use Settings → Backup & Export. Pausing stops new backups. Saved copies still follow the retention policy, with your latest backup kept while your subscription is active. Deleting a saved copy removes that cloud backup without changing your current portfolio.
Contact us and we'll remove all your data from our servers.
Removing a connection stops syncing from that source. Any data already on your device stays until you delete it from Wealthfolio.