Interactive Brokers is committed to protecting your account and your account assets from fraudulent practices. The Secure Login System provides an extra layer of security to your account at no charge1 through the use of a free physical security device or IBKR Mobile Authentication, our digital security application designed for smartphones. Although it requires an extra step when logging into your account, the simple practice of entering a randomly generated security code along with your username and password goes a long way toward protecting your account.
Consider this: if an Internet hacker or identity thief should somehow manage to obtain your IBKR username and password, they WILL NOT be able to access your account without physical possession of your Secure Login System security device or full access to your smartphone. Benefits of the Secure Login System include:
During the account application process, you will be asked to confirm a mobile phone number to continue. This will enable two-factor security through SMS mobile phone messaging. IBKR will send you a one-time passcode when you try to login.
The mobile two-factor authentication is temporary and will be removed once you activate one of the digital or physical security devices listed below.
IBKR Mobile Authentication provides two-factor authentication for your IBKR account via our IBKR Mobile app downloaded to your Android or iOS mobile device. IBKR Mobile Authentication requires a PIN code or fingerprint to operate. You use your IBKR Mobile Authentication alone or as an alternative to your existing physical security device.
Digital Security Card+ - Available to accounts with a balance greater than 1,000,000 USD, this card adds an extra layer of security through the use of a PIN number, a challenge code and a high count of possible code permutations.
We ship physical security devices every day. Projected delivery times range from several business days to several weeks, depending on your shipping address and local delivery options. IBKR Mobile Authentication is downloaded from the App Store or Google Play.
Once you have received your physical security device, log into Client Portal and follow the instructions here to activate your device.
IBKR Mobile Authentication users must first install the application from the respective mobile application store. For detailed instructions, see IBKR Knowledge Base article KB2260.
Once your security device or digital security app is activated, each time you log in to Client Portal, TWS, WebTrader or IBKR Mobile, you will be required to enter two authentication factors – your username and password combination and the security code generated by your device. When you successfully log in, your account will be secured with full perimeter coverage, protecting both your cash and positions from unauthorized access.
In the event that your physical security device has been lost, stolen or is inoperable, follow the instructions in IBKR Knowledge Base article KB1943.
Clients who participate in the Secure Login System enjoy enhanced withdrawal capabilities, while clients who do not participate are subject to daily and weekly withdrawal restrictions. The amount that a participating client may withdraw or transfer over a given one- or five-day period increases commensurate with the protective value of the device and is outlined in the table below.
|Maximum Withdrawal per Day
|Maximum Withdrawal in 5 Business Days
|IBKR Mobile Authentication
|Security Code Card*
|Digital Security Card*
|Digital Security Card+
* Represents a legacy device no longer being issued and in the process of being replaced with a version of the Digital Security Card. See IBKR Knowledge Base article KB975 for details.
 Please note that while IBKR imposes no fee to use a device, a replacement fee is associated with certain devices if lost, damaged or otherwise not returned should the account be closed.