Password Length (Retrieve Transactions)

[Good_Vibe]

Dear Mark:
02/14/2019
We are running Windows 8.1 on Dell PC’s. On or about February 1, 2019 or Chrome browser was “automatically” updated from version 71.0.3578.98 to version 72.0.3626.96. Immediately, our password manager (1Password) ceased working with the new (and subsequent versions of) Chrome. To get 1Password working, we learned from agilebits (the vendor) that we would have to pay for a subscription ($5/month). We researched other password options and subscribed to Keeper.

Now, with that background, to our problem with FundManager and our brokerage (Schwab). We changed our Schwab logon password (increasing the length from 8 to 24; yet honoring Schwab’s password restrictions e.g., allowed digits & special characters). We updated the password for each subaccount @ Schwab (via FundManager’s “Properties . . .” then “Transaction Retrieve Settings . . .”) setting the password for each subaccount to the new longer password. This appeared to be successful within FundManager.

We then attempted to download transaction (i.e., via FundManager’s “Retrieve Transactions . . .”). FundManager indicated that the maximum allowed length of a password is 8.
We reset our Schwab brokerage logon password, as well as the password for each subaccount back to one of length 8. The subsequent FundManager’s “Retrieve Transactions” work perfectly.

Sorry this is so long winded, but Schwab’s security experts claim Schwab has no such limit of 8. Our question, does FundManager impose a maximum length of 8?

Thanks so much for your excellent support and extensive knowledge of FundManager.
Good_Vibe

[Mark]

Hi Good_Vibe,

Fund Manager does not have a limit of 8 on the password length. This is from Schwab's OFX server (not their web server). Your Schwab password can be longer than 8 characters, but when logging into the OFX server you only need to enter the first 8, even if your web password is longer than 8. You might also try not using any special characters in the password, or at least not in the first 8 characters.

[Good_Vibe]

Mark:
You are the best! I simply didn't know enough about the retrieve transactions to work effectively with Schwab security.
Again, THANK YOU!

[Good_Vibe]

Dear Mark:
02/18/2019

Have cycled with Charles Schwab again on the OFX server password length question. The Schwab level IV technical support (IV is the highest level @ Schwab) claims that Schwab does NOT have an eight (8) limit on the OFX server password.

I (again) build a new 24 character password (within our password management software) for our Schwab Web logon (i.e., one that meets all Schwab password requirements). I specify (via Fund Manager’s “Properties . . .” then “Transaction Retrieve Settings . . .”) the new longer password for each subaccount. This appeared to be successful within Fund Manager.

Note that the password is set within Fund Manager’s “Properties . . .” then “Transaction Retrieve Settings . . .” via a copy/paste from our password manager's "vault" so there is little chance of error.

A subsequent attempt to "Retrieve Transactions . . ." from Fund Manager to Charles Schwab fails every time. The technical people at Schwab claim that Fund Manager is sending only eight (8) characters. So what are the facts? Is Fund Manager transmitting the full 24 characters to Schwab’s OFX server?

Thanks Again.
Good_Vibe

[Mark]

Hi Good_Vibe,

Fund Manager sends the full password, as you've entered it. It does not truncate it when sending to the OFX server.

[Good_Vibe]

Mark:
Thanks again. Hope to get this resolved. Am concerned about an eight (8) character password from a security point-of-view.
Regards, Good_Vibe

[Mark]

Hi Good_Vibe,

Have you tried leaving your password set to 24 characters with Schwab, but only entering the first 8 into Fund Manager?