Apparatuses, methods, systems, and program products are disclosed for data aggregation using a limited-use code. An apparatus includes a message module configured to intercept a message comprising a limited-use code. A message may be sent from a third-party server and intended for a user of a hardware device. A limited-use code may be used to verify an identity of a user for access to a third-party server. An apparatus includes a parse module configured to parse a message to determine a limited-use code. An apparatus includes a submission module configured to provide a limited-use code to a third-party server without user input. An apparatus includes an authorization module configured to prompt a user for authorization prior to intercepting a message, parsing the message for a limited-use code, and providing the limited-use code to a third-party server without user input.