Stiftung Warentest: Banking apps in a security check

Stiftung Warentest checks 38 banking apps for iPhones and Android smartphones in a major security check: some apps, however, do not know data protection for your sensitive bank details, others disappoint with an insecure password. Our test summary shows which banking apps you can use to securely transfer funds and which apps involve risks.

Stiftung Warentest: Banking app of the Sparkassen in first place

At Stiftung Warentest, twelve apps in 2018 were able to convince with "good". The Sparkasse's free banking app is in first place among the most secure Android apps and also in first place among iOS apps. The two apps did quite well in the first test in 2015. In the meantime, a lot has happened and the developers have improved the apps.

• In addition to the usual functions for account management, the Sparkassen app for Android and iOS also comes with practical features, such as searching for an ATM or transferring funds using a QR code.
• However, the data transmission behavior of the Android app could not be assessed because the encryption could not be cracked. However, the experts have not found any questionable data streams with the iOS app. Android grade: 2.2 (version 4.2.2), iOS grade: 2.0 (version 4.1.2).

Banking apps at Stiftung Warentest

If you are looking for a general banking app, for example to manage several accounts from different banks, you can take the second place:

• Stiftung Warentest awards "OutBank DE" as the second best banking app for iOS in October edition of Finanztest (grade 2.1 for version 2.7.0). OutBank is an account manager for the iPhone. You can manage the accounts of over 4, 000 banks using the app. With OutBank, sensitive data always remains on your mobile phone and is not sent.
• A self-chosen password is required. The app shows you how secure the password is, thus enabling a high level of security. Transfers to Germany and abroad as well as the search for sales also work easily.
• Banking 4A is in second place among the Android apps (grade 2.3 for version 6.10.4.6683). This app also does not belong to any bank, but enables multibanking with accounts from different banks. The data transmission behavior could not be assessed because the encryption could not be cracked.
• With both apps - Outbank and Banking 4A - the features are not as extensive as with the Sparkasse apps. For example, invoices cannot be transferred by photographing them or uploaded as a PDF.

This is how your bank did in the financial test

• VR banking for iOS (version 18.10.01): grade 2.8 and the Android app (version 18.10.0): grade: 2.7
• ING DiBa Banking to go (iOS / Version 2.1.2): Note: 3.1 and the Android app (Version 2.1.3): Note: 3.2
• TargoBank Mobile Banking (iOS / Version 3.47.1): Note: 3.7 and the Android app (Version 4.31.1): Note: 3.7
• Comdirect App (iOS / Version 3.6.5): Note: 2.1 and the Android App (Version 3.3.0): Note: 3.5
• Commerzbank (iOS / Version 10.0.0): Note: 3.4 and the Android app (Version 10.0.0): Note 3.3.
• Postbank finance assistant (iOS / Version 2018.2): Note 3.7 and the Android app (Version 2018.1-ee90d4e): Note 3.9
• Sparda Bank (iOS / Version 3.6.5): Note: 3.3 and the Android app (Version 3.6.5.1): Note: 3.3
• You can find more banks and all details at test.de

Secure banking via app

The financial test experts agree: banking via app is just as secure as online banking.

• However, it is important that the apps do not pass on sensitive data to the developers or the bank. All data should remain on your smartphone. The "OutBank" app does this very well.
• You release the bank order with the transaction number (Tan). MTan is very safe, since the Tan is only sent to a registered smartphone. ChipTan is even more secure because the GiroCard and a tan generator are required. The photo tan with a reader is also particularly safe.
• You should also be able to protect the app yourself with a secure password. For some apps this is a must, for others you have to activate the function first.