Leave this empty. Most banks let you tick the accounts during their own flow, and naming them here would narrow the consent to just these.

Fill it in only if a bank sent you straight back after 2FA and then shared no accounts — some (BBVA Italy) never show a picker, and this is the only way to tell them what to grant.

Shown instead of whatever the bank calls it. Revolut names every account and pocket after the account holder, so this is often the only way to tell them apart.

Every transaction imported from this bank account defaults here.

Set the balance the account has today. Imported transactions move it from here.

Budget actuals match on the category name, exactly — reuse an existing one.

A transfer moves money between two of your own accounts — it leaves the one above and lands here, so it nets to zero on the books.

The UUID in your .pem's filename — the control panel names the download after the application it belongs to.

The HTTPS address this install answers on — each one differs. Your bank redirects a real browser here, so a LAN address or localhost will not work.

A mismatch fails when you press Continue to bank, before your bank's login appears.

Stored on the server's disk, never in the database — anything in the database is also in every backup dump. Kept outside the image, so it survives a rebuild.