iBanFirst API Access & Open Banking (Austria)

Reaching your iBanFirst account data in Austria no longer means juggling eIDAS certificates or building your own PSD2 stack. open-banking.io links to iBanFirst (BIC FXBBBEBBXXX) across a network of 2,600+ EU and UK banks, so both business and personal accounts flow into one dashboard. Every consent you grant lasts up to 180 days before iBanFirst asks you to re-approve, and the whole setup is certificate-free.

The design is zero-knowledge: your encryption keys are generated on your own device, and open-banking.io only ever holds your public key. Balances and transactions are decrypted locally, so the service itself can never read what syncs through it.

How to connect iBanFirst

Connecting happens entirely in the open-banking.io dashboard — there is no API call, code, or key involved in this step.

  1. Sign up for open-banking.io and set your encryption passphrase. Your private key is created locally and never leaves your device.
  2. In the dashboard, search for iBanFirst and choose the account type you want to link — business or personal.
  3. You're redirected to iBanFirst's own secure login, where you approve access under PSD2 on the bank's screen. open-banking.io never sees your credentials.
  4. Once approved, your iBanFirst accounts sync into the dashboard and refresh automatically for the life of the consent.

Access your data

Once the connection exists, reading it programmatically is an optional developer step. On the Developers page, create an API key and export a credentials.json — this bundles the API key together with your private decryption key. From there you can use the CLI (openbanking accounts, openbanking transactions, openbanking sync), an SDK, or the REST API directly.

Every request carries the X-Api-Key header, and each response is decrypted locally with your own key. That's the crux of the zero-knowledge model: an API key alone returns only ciphertext — without your private key, the data stays unreadable. The CLI and SDK read and sync existing connections; they never establish one, since connecting always runs through the dashboard flow above.

Do I need an eIDAS certificate for iBanFirst?

No. open-banking.io is certificate-free — you approve access on iBanFirst's login and nothing else is required.

Can open-banking.io read my iBanFirst transactions?

No. It stores only your public key. Decryption happens on your device with a private key that only you hold.

How long does iBanFirst access stay active?

Up to 180 days per consent, after which iBanFirst prompts you to re-authorise from the dashboard.

Start linking iBanFirst at https://open-banking.io for around EUR 3/month.