Bank of America Mobile Banking Security & Privacy Scorecard
by Bank of America · iOS
Financial data and account activity are strongly protected both in storage and when moving between the device and the bank. Some account and device information is shared with third-party services the app relies on. The app provides strong controls over account security preferences.
Best for
Everyday banking and account management
Findings
- 0 critical
- 0 high
- 6 medium
- 6 low
- 4 info
16 issues identified across security and privacy analysis.
Top security issues
- ATS Exception Allows TLS 1.0 for ml.com with Forward Secrecy Disabled Across All Exception Domains
- Custom URL Scheme bofa:// Susceptible to Hijacking
- WebView Session Tokens Passed via URL Query Parameters
Top privacy issues
- IBM Coremetrics and Adobe Target Track Authenticated Users for Advertising Including Biometric Status
- Privacy Manifest Declares Third-Party Advertising While Claiming No Tracking
- InMobileMME (IBM MobileFirst) Collects Linked Location and Purchase History
Full analysis
Bank of America Mobile Banking
What This Means for You
Financial data and account activity are strongly protected both in storage and when moving between the device and the bank. Some account and device information is shared with third-party services the app relies on. The app provides strong controls over account security preferences.
Recommendation: Trustworthy
Best For: Everyday banking and account management
Key Findings
Data Security - 2 findings (2 info)
Network Security - 2 findings (1 medium, 1 low)
Code Safety - 0 findings
Privacy - 3 findings (1 medium, 1 low, 1 info)
Privacy Concerns
What Data is Collected
Bank of America collects account activity, device identifiers, and usage patterns to support banking services, detect fraud, and improve app reliability.
Third-Party Data Sharing
Data does not appear to be shared with advertising or analytics platforms.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 88/100 |
| Privacy | 80/100 |
| Data Security | 97/100 |
| Network Security | 86/100 |
| Code Safety | 90/100 |
| Data Collection | 82/100 |
| Data Sharing | 84/100 |
| User Control | 88/100 |
Positive Security Features
- Account data is protected with strong encryption, both stored on the device and in transit to the bank.
- The app's code is structured to minimize the risk of unauthorized access to financial information.
- The app provides meaningful controls over account security preferences and authentication settings.
Areas for Improvement
- Some network communications could use stricter security configurations to better protect data in transit.
- Certain account and device information is collected without fully transparent disclosure of its purpose or retention period.
- Privacy communications could be clearer about which data is used for personalization versus core operational needs.
About This Analysis
This scorecard is based on automated static analysis of the app's published code and configuration. Scores reflect security and privacy practices observed at the time of analysis.
App Details
- App: Bank of America Mobile Banking
- Developer: Bank of America
- Package: com.bankofamerica.BofA
- Version: 26.03.0 (Build 490)
- Scan Date: 2026-03-14
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 84/100 |