How to share a budget without sharing logins

Share the budget, not the password. Each person should have their own login to one shared set of accounts, transactions, and budgets, so that the picture is shared and the access is individual. A shared password means one inbox for every notification, one phone for every sign-in code, no record of who changed what, and a lockout for both of you if the account is ever compromised or the password changes. Separate logins to the same household are the difference between a shared budget and a borrowed one.

What goes wrong with one login

Everything the tool sends goes to one person. The email that says a bank connection expired, the note that a new subscription was found, the sign-in link itself: all of it lands in one inbox, and the other person finds out second-hand or not at all.

Every change is anonymous. When a category's amount moves or a transaction is recategorized, nobody can tell who did it, so the monthly conversation starts with "did you change this?" instead of with the numbers.

And the login is a single point of failure. A changed password locks the other person out until it is shared again. A compromised account exposes both people's finances at once. Over time, one person owns the budget and the other visits it, which is not sharing.

What sharing should mean

The left column is the picture, and the whole of it should be visible to both people. The right column is the access, and none of it should be handed over. Bank credentials in particular belong to the person whose bank it is; the shared picture is built from what each of you connects, never from one person signing in as the other.

Set it up, step by step

1. Choose a tool built for households, where one household can have two members with separate logins and the second login isn't a second subscription.
2. One person creates the household and invites the other by email. The other accepts with their own address and signs in on their own.
3. Each of you connects your own accounts. You sign in to your own bank inside the connection window, so bank credentials never pass between you. A joint account is connected once, by either of you.
4. Agree what is in the shared budget. A personal account can be part of the picture, so that net worth is complete, without its spending being counted in the shared budget or reviewed.
5. Each of you sets your own notifications, so the emails about your bank connections reach the person who can act on them.
6. Make sure both of you can run it alone. Both know how to sign in, where the budget is, and how to reconnect a bank. The test is whether the household could carry on if one person were unreachable for a month.

A worked example

A couple with two personal checking accounts, a joint checking account, two credit cards, a joint savings account, a mortgage, and an old business account, set up with two logins.

Two logins, one picture. When A's bank expires its connection, A gets the email and reconnects, because it is A's bank. When B recategorizes a purchase, it happens under B's own login rather than under a password both of you share. The business account is in the net worth figure and out of the budget, by agreement, so nobody has to explain a software invoice at the check-in.

Keep it healthy

Give personal money a rule, not a review. Visibility is not permission to comment. The arrangement you chose decides what is personal, and the shared login problem is replaced by a shared-picture problem if every visible purchase becomes a question. See Yours, mine and ours for setting that rule.

Reconnect your own banks. A connection that expires is routine, and the person whose bank it is gets the notice and fixes it in a minute. Left alone, it makes the shared picture stale for both of you.

Use the picture to ask, not to audit. A changed category or amount is a question for the check-in, not a running commentary.

Common mistakes

• Sharing the password because it seems simpler. It is simpler for a week.
• One person connecting everything, including the other's banks with the other's credentials. Bank sign-ins are personal, and the tool should never need one person to sign in as the other.
• Leaving personal accounts out of the picture entirely, so that net worth is wrong. Out of the budget is a choice; out of the picture is a hole.
• Only one person knowing how the tool works. The household then depends on one person's availability.
• Treating the shared view as a license to comment on every purchase.
• Never sending the invitation, and showing the other person the screen instead. That is one login with a spectator.

Common questions

Can we just both know the one password? You can, and you get one inbox for every notification, one phone for every sign-in code, anonymous changes, and a lockout for both when it changes. Separate logins to the same household cost nothing in a tool built for couples and remove all four.

Will my partner see my personal spending? Whatever is in the shared picture is visible to both, which is the point of the picture. What counts in the shared budget is a separate decision: a personal account can be visible, count toward net worth, and stay out of the budget, so its spending is never up for review.

Do we each need to connect our own banks? Yes. Connecting a bank means signing in to it inside the connection window, and that sign-in belongs to the person whose bank it is. Never give a partner your bank credentials to save a step; each of you connects your own, and the household sees all of it.

Does the second login cost extra? In a tool built for households, it shouldn't. Check that a partner's login is part of one household subscription rather than a second subscription, and that the second person is never billed separately.

What happens to the shared picture if we separate? Each login is individual, and each person connected their own banks, so the untangling is a matter of household membership rather than of a shared password that one person changes on the other, and some tools need their support team to separate a household once bank connections have been used in it. Keeping personal accounts personal from the start is what makes that clean.

How Zypper handles this

Zypper is built around separate logins to one household. A couple plan covers two people under one subscription: the household owner invites a partner by email from the members settings, the partner accepts and signs in with their own email address, and there is no shared password or inbox. There is no Zypper password at all, since sign-in is by an emailed link or with Google, so there is nothing to hand over. Connected accounts, transactions, and budgets belong to the household, so both of you work from the same picture, while each of you signs in to your own bank inside the Plaid window when connecting, so bank credentials never pass between you, and each of you chooses your own email notifications. An account can be excluded from the budget and still count toward household net worth, which is how a personal account stays in the picture without its spending being reviewed. The invited person is never billed. See Inviting your partner or family member and Privacy and security at Zypper for the details, or get started with Zypper to invite your partner.