Okay, I know I'm reviving an old question here, and it is probably a lost cause. But ...
The only two clauses that deal with passwords are as follows:
Unauthorized use of JPMorgan Chase's
Websites and systems, including but
not limited to unauthorized entry into
JPMorgan Chase's systems, misuse of
passwords, or misuse of any
information posted to a site, is
You agree that (i) you will not engage
in any activities related to the
Website that are contrary to
applicable law, regulation or the
terms of any agreements you may have
with JPMorgan Chase, and (ii) in
circumstances where locations of the
Website require identification for
process, you will establish
commercially reasonable security
procedures and controls to limit
access to your password or other
identifying information to authorized
The unauthorized use clause seems to be simply stating the obvious:
that it is prohibited to access someone's account without authorization. (i.e. Don't steal someone's password and use it and don't hack into their servers.) That wouldn't apply here since the Mint.com / quickenonline user authorizes the company.
The second clause does seem to address this situation. As I read it, it basically just says to use sound security practices. I would say that means if you do your research and you trust Mint.com to protect your password then you are free to choose to authorize them to log in on your behalf.