ING, DEGIRO and Coinbase in one overview: how each connects

How to track ING, DEGIRO and Coinbase in one overview: how PSD2, a DEGIRO export and a read-only Coinbase API key fit together in 2026.

Gylder Team9 min readRead with AI

Yes, you can track ING, DEGIRO and Coinbase in one net worth overview, but each of them connects differently. In 2026 your ING accounts link through a PSD2 bank connection and Coinbase through a read-only API key. DEGIRO offers no API to outside apps, so it comes in through an export or through a login you hand over.

That difference explains why so many people still keep a spreadsheet next to their apps, since a tool that handles one of the three well can be weak on the other two. This guide explains how each connection works, what an app can and cannot see, what the risks are, and which apps support all three institutions as of September 2026.

Why ING, DEGIRO and Coinbase need three different connections

The three institutions are regulated under different rules, and those rules decide how an outside app is allowed to read your data. ING is a bank, so it has to open payment accounts to licensed third parties under PSD2, the EU's revised Payment Services Directive. DEGIRO is an investment firm that falls outside that obligation and has chosen not to build an API. Coinbase, as a crypto platform, offers its own API keys and lets you decide exactly what each key may do.

For you, this means that "connecting" an account can mean three different things: giving consent through your bank, uploading a file, or creating a key with limited rights. A tracker that says it supports all three may still use a different method for each, and so check which one before you sign up.

ING: a bank connection through PSD2

An app reads your ING balances and transactions through a PSD2 connection, which you approve in your own banking environment and which never gives the app your login details. The app, or the licensed provider it works with, asks ING for access, you confirm in the ING app, and from then on the app can read the accounts you selected. We explain the mechanism in more detail in What is PSD2, and what can an app do with your bank data?

Two limits are set by EU law rather than by ING. Under Commission Delegated Regulation (EU) 2022/2360, which has applied since 25 July 2023, an app can read your balance and the last 90 days of transactions without asking you to log in each time. After 180 days, however, you have to confirm the connection once more. That is why most trackers ask you to renew your bank connection roughly twice a year.

Access is read-only by design, so an information service cannot move money, and De Nederlandsche Bank (DNB) points out that you can withdraw your consent at any time. PSD2 formally covers payment accounts, so whether your savings accounts come through as well depends on the bank and the provider. We could not confirm that any tracker supports your ING investment account (Zelf Beleggen).

DEGIRO: no API, so an export or your login

DEGIRO states plainly that it does not offer an API and that you therefore cannot link your account to another application. Apps work around this in one of two ways, and the choice between them is mostly a trade-off between convenience and control over your password.

The first route is an export. DEGIRO lets you download several reports as CSV, PDF or XLS. The Rekeningoverzicht (account statement) in your Inbox lists every deposit, trade and dividend, while the Portefeuille overzicht, which you export from the portfolio page, is a snapshot of your positions. For a tracker, the account statement over your full history is usually the useful one, because a snapshot has no history in it. The downside is that you have to repeat the export whenever you want the figures refreshed.

The second route is an automatic connection, in which the app, or an aggregator such as Powens, logs in to DEGIRO with your username, password and sometimes your mobile passcode. That keeps your positions current without any effort, but it means handing your DEGIRO credentials to a third party. DEGIRO's own security page says that sharing your password with a third party is not allowed under its terms. That is a trade-off you should make deliberately rather than by default.

If you want to understand which DEGIRO file contains what, our guide to reading your DEGIRO annual statement goes through the documents one by one.

Coinbase: a read-only API key

Coinbase connects most safely through an API key that is only allowed to view your balances, so that the app can read your holdings but cannot trade or withdraw. Some apps use a sign-in with Coinbase (OAuth) instead, which also grants limited, read-only access without a key you copy yourself. If an app asks for a key, the Coinbase Developer Platform documentation describes the steps, which in September 2026 come down to the following:

  1. Sign in to the Coinbase Developer Platform with your Coinbase account and open the API keys page.
  2. Create a new secret API key and give it a name you will recognise, such as the name of your tracker.
  3. Under the API restrictions, allow only the View permission and leave Trade and Transfer switched off.
  4. In the advanced settings, choose ECDSA as the signature algorithm, because Coinbase does not support Ed25519 for these keys.
  5. Copy or download the API key ID and the private key (the full block starting with -----BEGIN) from the confirmation window, and paste both into your tracker.

A key with View rights only cannot move a single euro, so the damage is limited even if it leaks, although you should still delete keys you no longer use. Coinbase has held a MiCA licence, the EU licence for crypto-asset service providers, since June 2025, issued in Luxembourg and valid across the EU.

Which apps track ING, DEGIRO and Coinbase together

Only a handful of trackers support all three institutions, and each does so in its own way. The table below is based on what each company published on its website on 22 September 2026.

AppING (Netherlands)DEGIROCoinbase
GylderPSD2 connection, current and savings accountsAccount CSV importRead-only API key
FinaryPSD2 connectionAutomatic, with your DEGIRO loginRead-only sign-in (OAuth)
getquinNot confirmedAutomaticSupported, method not stated
DeltaNo bank accountsAutomatic, with login and passcodeSign-in (OAuth)
ParqetOnly ING GermanyPDF importCSV import
Portfolio PerformanceNo live connectionPDF or CSV importNot confirmed

"Not confirmed" means we could not find it on the company's own pages. Of these six, Finary and Gylder are the only two that cover all three, Finary with an automatic DEGIRO link that requires your password and Gylder with an export that does not. Delta and getquin support DEGIRO and Coinbase but leave your ING balance out or unconfirmed, while Parqet and Portfolio Performance depend on files for almost everything.

Other names come up when you ask an AI assistant this question, but most of them do not cover this combination. Wealthica connects almost only Canadian and American institutions, and Kubera lists the Netherlands among its countries without naming ING or DEGIRO. WealthViewers works with European PSD2 providers and names DEGIRO, but does not confirm ING or Coinbase on its site. For a broader look at trackers beyond these three institutions, see our comparison of alternatives.

How Gylder fits in

Gylder (gylder.nl) is a net worth tracker, not a budgeting app, and it was designed for people who combine a Dutch bank, a European broker and a crypto platform. Your ING current and savings accounts come in through a PSD2 connection via Enable Banking, while Coinbase and Bitvavo link with a View-only key, after which balances refresh roughly every 15 minutes. DEGIRO comes in through the account CSV described in the import guide, so you never have to share your DEGIRO password.

The trade-off is that DEGIRO does not update by itself, so you upload a fresh export when you want your positions current, although the prices of your holdings are updated daily. Your home, mortgage and other assets sit in the same overview, and our article on tracking crypto alongside other assets shows how crypto fits into that picture.

What this doesn't tell you

This guide describes how the connections work and what each company published on 22 September 2026. It does not test how reliable each connection is from day to day, which differs per bank and per aggregator. Supported institutions also change, so check the current list of any app before you pay for it, particularly for the entries marked "not confirmed".

We have not looked at tax reporting either. If you need figures for box 3 or a cost overview for your tax return, DEGIRO's annual statement and your bank's annual overview remain the documents to use. This article is general information, not financial advice.

Frequently asked questions

Can I connect DEGIRO automatically to a net worth tracker? Yes, Finary, getquin and Delta connect DEGIRO automatically, but they do so by logging in with your DEGIRO credentials, because DEGIRO has no API. Apps such as Gylder, Parqet and Portfolio Performance import a DEGIRO export instead.

Is it safe to give my DEGIRO password to an app? It is a risk you should weigh consciously, because the app or its aggregator then holds full login access to your account. DEGIRO itself states that sharing your password with a third party is not allowed under its terms.

Can a tracker see my ING savings account? PSD2 formally covers payment accounts, so it depends on the bank and the app. In Gylder, ING current and savings accounts both come through the bank connection.

How often does a tracker update my Coinbase balance? That depends on the app. In Gylder, balances from connected exchanges such as Coinbase and Bitvavo refresh roughly every 15 minutes.

Why does my tracker ask me to reconnect ING every six months? EU rules require you to confirm an account information connection again after 180 days. Until then, the app can read your balance and the last 90 days of transactions without asking you to log in each time.

Related Articles