Encrypted on your device. Unreadable on ours.
Turbobulls is an encrypted portfolio tracker. Your portfolio and wallet data is locked on your device before it leaves it, and what reaches our servers is ciphertext only your password can open. That is why we cannot read it, and why a few conveniences other apps offer are missing here, on purpose.
The same encryption on every plan, free included · 14 days of everything · Export on every plan
What happens between your keyboard and our database?
- 1
Your workspace gets its own key pair
When you create a workspace, your device generates a fresh RSA key pair just for it. Nothing is shared between workspaces.
RSA-OAEP · 2048-bit - 2
Your workspace gets a data key
Your device also generates a random 256-bit data key. Every transaction is encrypted with it, each time with a fresh random value mixed in, so no two encrypted records look alike, and a stored record that was changed fails to open.
AES-256-GCM - 3
The data key is locked before it is stored
The data key is itself encrypted with the workspace’s public key and only ever stored in that locked form. We hold the locked key and the locked data, and nothing that opens either.
RSA-OAEP - 4
Your password opens the lock
The private key that unlocks the data key is encrypted with a key your device derives from your workspace password, slowly on purpose, so guessing it is expensive. The password is used on your device and never sent to us.
PBKDF2-SHA256 - 5
We store what is left: ciphertext
What lands in our database is the encrypted transaction and the locked keys. At no point does your readable portfolio pass through a server we run.
Ciphertext
What can we actually see?
Which stock, how much, at what price: ciphertext
- Readable on our side: your email address, and the type and time of each record
- Prices are public data fetched by name, so we see which instruments you ask prices for
- Card details never reach us: Stripe handles payments
What you see after your device decrypts it.
Who holds the key?
A password only your device sees
- A meter rates it as you type, on your device, and a password that is too easy to guess is not accepted
- No rules about symbols or capitals: several unrelated words work best
- You type it twice, so a typo cannot lock you out
Unlocked on your device, every time
- Lost the password? The recovery key works in the same field
- Each workspace has its own password and keys, so one never opens another
If we cannot read your data, how do you get back in?
A recovery key, shown once
- Copy it, or download it as a file
- “Open my workspace” waits until you have saved it
- Lose both the password and the key, and nobody can recover the data: not us, not anyone
Your encryption, in the app’s own settings
- Make a new recovery key at any time with your current password; the old one stops working
- The same on every plan, free included
Careful companies get breached too.
Robinhood2026Phishing through its own emails
Not a breach of Robinhood’s systems. Attackers abused a flaw in the account sign-up flow so that Robinhood’s own servers sent the phishing emails, which passed every authenticity check because they were genuine Robinhood emails. The addresses they targeted most likely came from Robinhood’s 2021 breach of about 7 million customers, still circulating five years on.
Checked September 2026 against BleepingComputer.
Coinbase2025Bribed support staff
Criminals paid overseas support contractors to pull customer records out of internal systems: names, addresses, ID images, balance snapshots and transaction history for about 69,000 customers. They then phoned those customers pretending to be Coinbase, and some sent money. Coinbase put the cost at $180 million to $400 million.
Checked September 2026 against SEC filing.
Snowflake2024Stolen customer logins
Snowflake itself was not breached. Attackers used customer logins stolen by malware, on accounts with no second factor, to pull data out of the cloud databases of about 165 organisations. Whatever the account could read, they could read too.
Checked September 2026 against Mandiant.
Zacks2024Third leak in four years
An investment-research firm. Records of about 12 million users, including names, addresses, phone numbers and password hashes, were taken in June 2024 and posted online. Earlier leaks had exposed 820,000 and 8.8 million accounts.
Checked September 2026 against BleepingComputer.
Morgan Stanley2022Discarded servers
Not a hack. The SEC fined Morgan Stanley Smith Barney $35 million because, over about five years, it had handed retired servers and hard drives to a moving company with no data-destruction experience. Thousands were sold on, some still holding the unencrypted details of around 15 million customers. The devices had encryption built in. Nobody had switched it on.
Checked September 2026 against the SEC.
Plaid2022$58 million settlement
Not a breach. The bank-connection service behind many finance apps settled a class action for $58 million, approved by the court in July 2022, over claims that it used people’s bank logins to collect transaction data without proper consent. The business model itself was what went to court.
Checked September 2026 against the final-approval notice.
Capital One2019One misconfigured setting
A bank. One misconfigured setting in its own web application let a single outsider copy the credit card applications of about 106 million people in the United States and Canada, including some 140,000 Social Security numbers and 80,000 bank account numbers.
Checked September 2026 against Wikipedia.
Equifax2017Unpatched software
A credit bureau. A software fix had been available since March 2017 and was never applied. Between May and July, attackers walked through the gap and took the records of 147.9 million Americans, 15.2 million British and about 19,000 Canadian residents. Equifax later settled for $575 million.
Checked September 2026 against Wikipedia.
There is nothing here worth stealing. Encrypting on your device does not make a break-in impossible. It changes what a break-in gets. Your portfolio and wallet data sit on our servers as ciphertext, and the key that opens them never leaves your device, so an intruder would walk away with numbers they cannot read: nothing to trade on, nothing to sell, nothing to phone you about. What they could take is your email address, plus the type and timestamp of each record without any of its contents. Card details never reach us at all; Stripe holds those. We would rather say that plainly than pretend otherwise.
Same portfolio, three places to keep it.
| Question | A spreadsheet Excel, Google Sheets | A typical tracker Server-side, often with a broker login | Turbobulls End-to-end encrypted |
|---|---|---|---|
| Where your data is encrypted | No: Not by you. Your cloud drive may, with its own keys | No: On their servers, with keys they hold | Yes: On your device. The key never leaves it. |
| Who can read your holdings | No: Anyone who gets the file | No: The company, and anyone who gets into its servers | Yes: Only you |
| Asks for your broker login | Yes: No | It depends: Often | Yes: Never |
| What a breach would expose | No: The whole file | No: Your full financial picture | Yes: Ciphertext, plus your email address |
| Can staff or a court order get readable data | It depends: Yes, if it sits in a cloud drive | No: Yes | Yes: No. There is no readable copy to hand over |
| Where it is hosted | It depends: Your computer, or your cloud drive's servers | It depends: Depends on the company | Yes: EU servers in Frankfurt |
| If you forget your password | It depends: No password involved | It depends: Reset by email | It depends: Only your recovery key gets you back in |
| Automatic broker sync | No: No | Yes: Often | No: Not yet, and only in a way the server cannot read |
| Export your data | Yes: It is already a file | It depends: Depends on the product | Yes: Always, on every plan |
“A typical tracker” covers most portfolio apps, including the free ones that log into your broker for you. “Often” means common in that group, not universal. This table compares ways of building a tracker, not named products.
For names, see how Turbobulls compares with getquin, Sharesight, Snowball Analytics and Parqet.
How do your trades get in without a broker login?
- CSVXLSX1
Export your history
Download it from your broker or bank: the file it already gives you.
- CSVDrop your file hereor choose oneRead on this device. Your file is never uploaded.2
Drop the file in
Files, not logins. It is read on your device and encrypted before anything reaches us, so we cannot read your data.
- Review before importing248 rowsVWCEBuy-€1,689.60VWRLDividend+€96.40EIMIBuyDupImport 245 transactions3
Check it, then import
Every trade, dividend and fee as your broker booked it, with duplicates marked. Nothing is saved until you import.
Ready-made for 60+ brokers, banks and apps
Anything else comes in through Generic CSV: you match its columns once.
Broker, bank and app names and logos belong to their owners and appear only to show which export files Turbobulls reads. Turbobulls is not affiliated with, endorsed or sponsored by any of them. To have a logo removed, write to hello@turbobulls.com.
What does it cost you?
No broker sync
Automatic sync means a server logs into your broker and reads your trades. Ours cannot read them, so you import a file instead. A sync that fetches and encrypts on your device is possible, just harder to build.
No bank connections
A bank feed is the same thing for your accounts: a server reading your statements. You import the statement file instead.
No password reset
We never have your password, so there is nothing to reset it from. Your recovery key is the way back in.
No social feed, no AI reading your holdings
Both need a server that can read your portfolio. Ours cannot, on any plan.
People who read the privacy policy before the pricing page
Anyone who opened a privacy policy, saw “trusted partners” or “anonymised data”, and closed the tab.
- Privacy-conscious investors
- Security & privacy professionals
- High-net-worth individuals
- Multi-broker households
Not the right fit: anyone who needs one-click broker sync or portfolio sharing today. We would rather you know that now than after you import.
What else is encrypted the same way?
Portfolio tracker
Holdings, returns and allocation across every broker, in your currency.
Dividend tracker
Every payout on one calendar, counted after the tax withheld at source.
Multi-currency portfolio
More than 30 currencies, each trade at the exchange rate of its own date.
Net worth tracker
Accounts and investments in one figure, against the money you put in.
Budget tracker
Envelope budgeting with the money you already have.
Expense tracker
Where every euro of the month went, category by category.
If something on this page is wrong, we want to know.
- Acknowledged within 72 hours
- Assessed within 7 days
- What changed is published
- The person who found it is credited
Security reports go tosecurity@turbobulls.com