Online banking with KMyMoney

Hello Planet,

KMyMoney learned to send credit transfers to your (German) bank 🙂

For many years KMyMoney could do the other way round; download transactions from your bank using HBCI, FinTS and OFX. But to transfer money it was required to visit the bank’s web site again — a usability nightmare.

The current developer branch allows users to create SEPA credit transfers, store and send them — thanks to AqBanking (website is in German). Some basic features are available already, so the IBAN is validated and you get suggestions for BICs. Also an address book of account numbers was added to the payees. But that is not used for auto-completion, yet.

Screenshot of credit transfer in KMyMoney

My vision is a program that helps you to do ordinary tasks. Did you ever pay overdraft interests because you overdrew an account while another account was well-stuffed? With KMyMoney it should be able do fix that problem with a minimal amount of clicks. Even better, for years KMyMoney creates a forecast based on scheduled transactions. So it can make suggestions to move your money from the saving accounts even before an account drops into the red zone.

Sadly only a small amount of users will profit from the credit transfers: only German banks are supported. Everything was created in a very flexible way. Hopefully somebody else will use that to add support for more protocols.


6 thoughts on “Online banking with KMyMoney”

  1. This is awesome!
    I’m currently using another (really well done) HBCI application (Hibiscus).
    But there are two things I don’t like about it:
    – it’s Java based and therefore has a terrible DE integration
    – it misses features like forecast scheduling etc. I often want to be able to make certain financial predictions based on the (predicted) balance of various accounts and it looks like KMyMoney should be able to do that…

    So it’s about time I give KMyMoney another try – the last time I did was probably ~7 years ago.

    1. I have to admit that KMyMoney is far away from the sophisticated options and functions which are offered by Hibiscus. Also the whole range of dated transfers is still on my to-do-list. My goal is more to achieve good usability.

      Btw: If you test the development branch it is useful to have a tan generator, just to be on safe. There may be some bugs left — but testers are really needed to find bugs.

  2. Hi, great features! First question came up, how can the database of account numbers can be secured? Maybe via kdewallet?
    The main wish here is to protect against replacing the numbers in the background by attacker scripts. This is easily possible for unsecured storage since users install plenty of python or ruby or….. files of unknown origin (plasmoids are examples here). None of them are sandboxed but javascript files.

    1. Good point. The good thing is: KMyMoney can encrypt the file with GPG already.

      But if an attacker is able to execute code, it is no problem to change something else like the plug-in which communicates with the bank and replace the account number there — like it is done with online banking in browsers already.

      We could make the later attack more difficult by preventing to load (online banking) plug-ins from the user directory (KService is used). I will think about that…

    1. The problem is to implement the protocol which the bank uses. It is not important to use IBANs or BICs.

      The other widely spread protocol is OFX Direct Connect¹. But that is not open and I do not know any library which can send orders to the bank (aqBanking can download transactions, though).

      I designed my additions in a way that the support for other protocols can be added — in a developer and user friendly way. Maybe I blog about that in future. Are you interested to add your bank’s protocol?

      ¹ Actually it is used by most banks outside Germany.

Comments are closed.