Skip to content

Connect your bank

USING SPENT

Connect your bank.

Pick your bank, paste your credentials. Spent encrypts them and never sends them anywhere.

After you install Spent, opening the dashboard for the first time launches a short setup wizard. The wizard asks for your bank’s login the same way the bank’s own website does.

IsracardHapoalimLeumi
012345678
••••••••
Encrypted locally

You can connect multiple banks. Run the wizard again from Settings → Banks.

Spent stores your bank password (and your Claude API key, if you use one) encrypted with AES-256-GCM in a local SQLite database at data/spent.db. The encryption key is generated on first run, written to data/.encryption-key, and never leaves your computer.

Read the full mechanism in Security & privacy.

Most Israeli banks do not support 2FA in a way that’s compatible with automation. If you have 2FA enabled, you’ll need to disable it on the bank’s side before Spent can log in.

Each bank asks for slightly different fields. Here’s what each wants.

  • ID number — your 9-digit Israeli national ID (Teudat Zehut).
  • Last 6 digits of your card — from the front of the card.
  • Password — the same password you use on digital.isracard.co.il.
  • Username and password from cal-online.co.il.
  • Username and password from max.co.il (formerly Leumi Card).
  • Username and password from your Israeli Amex account.
  • User code and password. The user code is not your ID number — it’s the one shown in the bank app’s Personal area.
  • Username and password.
  • Username and password.
  • ID number, password, and an account number (sometimes labeled num).

First International (FIBI), Otsar Hahayal, Bank Pagi

Section titled “First International (FIBI), Otsar Hahayal, Bank Pagi”
  • Username and password. All three are FIBI-group banks and share a login pattern.
  • ID number and password.
  • Username and password.
  • Email, password, and an OTP delivered to your phone during each sync. Spent will pause and prompt you for the OTP when needed.
  • Username and password from the benefit-scheme website.

Spent opens a headless Chromium tab, logs into the bank using your credentials, and pulls the last 6-12 months of transactions (depending on the bank). The first sync can take a few minutes — subsequent syncs are faster because Spent only processes new transactions.

Syncing Isracard
23 of 47~12s left
Connected
Fetched May
Categorize

Sync runs in the background. You don’t need to keep the browser open. If a sync fails, Spent shows the error in the dashboard with a hint about what went wrong (see Troubleshooting).

Next Categorize with AI