Tips for selecting your security questions and answers
The security questions represent just one component of the security framework which IB has put into place to protect your account. We offer the following simple tips for selecting your security questions and answers in order to make the most effective use of this security measure:
1. Choose questions having answers that you can remember in the future and answer consistently.
2. Use one-word answers whenever possible.
3. Be careful with spaces. If you use "San Diego" as an answer to one of your security questions, the system will reject "SanDiego."
4. Avoid using quirky or nonsensical answers as they'll likely to be difficult to remember later.
5. Select a question which cannot be easily guessed or researched, has many possible answers and where the probability of guessing the correct answer is low.
6. Select a question for which the answer is unlikely to be known by others such as a family member, close friend, relative, ex-spouse, or significant other.
7. Choose a question having an answer which is stable and not likely to change over time.
What is the purpose of the security questions?
IB requires applicants to select and provide answers to three security questions each selected from a separate pool of questions having varying degrees of complexity. In the event we receive a telephone inquiry involving sensitive information, prior to acknowledging or discussing any account specific information with the caller we will first look to verify that caller's identity. This is accomplished through a multi-tier security process, one tier which requires that the caller answer a randomly selected security question. The caller must provide an answer to the security question which exactly matches the answer we have on file. Otherwise, the request for information will be denied and a potential lock-down placed upon the account.
Troubleshooting Trading Platform Login Failures
Click on the link below which best describes your situation:
a. Confirm whether your account has been approved. Accounts which have not been approved or which have been approved after the daily cut-off time are provided access solely to Client Portal and not the trading platform (access will be provided next day if approved after daily cut-off time)
b. Confirm whether your account remains open. Accounts which have been closed, either by customer action or by IBKR due to no balance, no longer have access to the trading platform but continue to have access to Client Portal in order to obtain activity and tax statements. Access to Client Portal is provided using the same User Name and password combination which existed when the account was open and do not require the use of the security device.
c. If you are attempting to log into your paper trading account, make sure that you are not using the user name and password combination from your live account. This combination is possible only if paper account is selected in the drop down menu of the login window.
a. If operating with a temporary passcode, note that alpha characters are case sensitive and are required to be input in upper case format
b. If operating a security card or electronic device, note that there are no spaces between characters
For security purposes, all requests for assistance with a user name and/or password must be initiated via telephone and require prior verification of the account holder’s identity. Requests are to be directed to one of the regional Client Services.
a. Confirm that your Internet connection is active (test by accessing another website). If you are unable to establish an Internet connection you will need to contact your Internet Service Provider for assistance.
b. Confirm whether you are operating under a firewall which is blocking the TWS connection. If so, the firewall would need to be re-configured in order to provide access.*
c. Ports 4000/4001 are being blocked. These ports are often blocked from public connections such as hotels, cafes, etc. and required to be open to accommodate Inbound/Outbound TCP protocol. In addition, if you have a router connected to your computer, these ports must be open on the router.*
*Please click here to check your connectivity status: IBKR Dedicated Connectivity Test Page.
If you are temporarily without possession of your security device, interim access may be provided by contacting your regional Client Services via telephone where, once your identity has been verified, you will be provided with a temporary passcode.
The temporary passcode is a static alpha-numeric code which replaces the randomly generated code provided through your security device and which will provide full access to Client Portal and the trading platforms for 2 days. Should a longer period of permanent device replacement be necessary, and to obtain enhanced protection, it is recommended that you use the temporary passcode to log into Client Portal and print out the online security code card which will operate as a replacement to your security device for up to 3 weeks.
After the expiration of the temporary passcode or online security code card, or if you regain possession of your security device beforehand, you will need to log into Client Portal and select the menu option to re-activate your security device.
In the case of a lost or damaged security device, you will need to contact our Client Services to arrange for a replacement and to provide for interim access. As the time frame for shipping a replacement device may range from 3 to 14 days depending upon your country of residence, interim access is provided via an online security code card. This card may be retrieved for printing or saving as an image to your computer once a temporary passcode has been provided for Client Portal access.
The temporary passcode is intended to provide full access to both Client Portal and the trading platforms for a period of 2 days. After 2 days, the temporary passcode may no longer be used to access the trading platforms but may be used to access Client Portal for an additional period of 10 days. The Client Portal access, however, is limited solely for the purpose of printing or saving the online security code card.
If your window of access to Client Portal using the temporary passcode remains, you may print or save the online security code card through which full access to both Client Portal and the trading platforms is provided for a period of 21 days. If you are unable to log into Client Portal, you will need to contact your regional Client Services for assistance.
The online security code card is intended to provide full access to both Client Portal and the trading platforms for a period of 21 days. This time frame, while limited, is intended to provide sufficient opportunity for the account holder to either regain possession of a temporarily unavailable security device or request and receive a replacement device.
If you are unable to log in using the online security code card, you will need to contact your regional Client Services for assistance and to provide information as to the status of your permanent security device.
Depending upon your location, the physical security device should be delivered to the address of record on your account within 2 days in the case of US residents and within 2 weeks for all other accounts. It’s important to note that the permanent devices are set to automatically activate after a set time frame if not yet manually activated by the account holder. If this is the case and you encounter difficulties logging into your account, please contact our Technical Assistance Center from one of the numbers listed on ibkr.com/support.
If your window of access to Client Portal using the temporary passcode remains, you may print or save the online security code card through which full access to both Client Portal and the trading platforms is provided for a period of 21 days.
If you are unable to log into Client Portal, you will need to contact your regional Client Services for assistance.
You have received your new two-factor security device. Detailed instructions on its activation are in the envelope in which the device came. Alternatively, the card will auto-activate in 2-3 weeks, depending on your geographical location.
Troubleshooting Client Portal Login Failures
Click on the link below which best describes your situation:
- Receiving “Invalid user name password combination” message
- Receiving “Login Failed” message upon entering security device values
- I’ve forgotten my user name and/or password
- I’m temporarily without possession of my security device
- My security device has been lost or damaged
- I’ve been issued a temporary passcode which has expired
- I’ve been issued an online security card which has expired
- I’m awaiting delivery of my physical security device and can now no longer log into my account
- I am able to log into Client Portal with my temporary passcode but not the trading platform
- I am in possession of my security device and wish to activate it
- Receiving “BAD CHARACTER” message after entering my user name
IMPORTANT NOTE: If you are unable to resolve your account access issue from the information above, please contact your local Client Services Center. Also note that for security purposes, all requests for login assistance must be initiated via telephone as it requires prior verification of the account holder's identity. A listing of Client Services Centers, contact numbers and hours of operations may be found via the following website link: ibkr.com/support
1. Receiving “Invalid user name password combination” message.
Make sure that the Caps Lock key is not on as user name is case sensitive and is required to be input in lower case format.
IMPORTANT SECURITY NOTICE: If an account experiences 10 consecutive failed Client Portal login attempts within any 24-hour period, it will be locked out from login regardless of subsequent attempts using the correct user name and password combination. This lock out, intended as a security measure to prevent hackers from random attempts to guess the password, will remain in force until 24 hours have passed since the last unsuccessful log in attempt.
If you believe that your account has or is about to be been locked due to consecutive failed login attempts, you will need to contact to contact your regional Client Services Center via telephone for assistance. Note that assistance for log in matters is only provided via telephone and after the identity of the account holder has been verified.
2. Receiving “Login failed” message upon entering security device values
a. If operating with a temporary passcode, note that alpha characters are case sensitive and are required to be input in upper case format
b. If operating a security card or electronic device, note that there are no spaces between characters
3. I’ve forgotten my user name and/or password
For security purposes, all requests for assistance with a user name and/or password must be initiated via telephone and require prior verification of the account holder’s identity. Requests are to be directed to one of the regional Client Services Center.
4. I’m temporarily without possession of my security device
If you are temporarily without possession of your security device, interim access may be provided by contacting your regional Client Services Center via telephone where, once your identity has been verified, you will be provided with a temporary passcode.
The temporary passcode is a static alpha-numeric code which replaces the randomly generated code provided through your security device and which will provide full access to Client Portal and the trading platforms for 2 days. Should a lengthier period of interim access be necessary, and to obtain enhanced protection, it is recommended that you use the temporary passcode to log into Client Portal and print out the on-line security card which will operate as a replacement to your security device for up to 3 weeks.
After the expiration of the temporary passcode or on-line security card, or if you regain possession of your security device beforehand, you will need to log into Client Portal and select the menu option to re-activate your security device.
5. My security device has been lost or damaged
In the case of a lost or damaged security device, you will need to contact our Client Services Center to arrange for a replacement and to provide for interim access. As the time frame for shipping a replacement device may range form 3 to 14 days depending upon your country of residence, interim access is provided via an on-line security card. The on-line security card may be retrieved for printing or saving as an image to your desktop once a temporary passcode has been provided for Client Portal access.
6. I’ve been issued a temporary passcode which has expired
The temporary passcode is intended to provide full access to both Client Portal and the trading platforms for a period of 2 days. After 2 days, the temporary passcode may no longer be used to access the trading platforms but may be used to access Client Portal for an additional period of 10 days. The Client Portal access, however, is limited solely for the purpose of printing or saving the on-line security card.
If your window of access to Client Portal using the temporary passcode remains, you may print or save the on-line security card through which full access to both Client Portal and the trading platforms is provided for a period of 21 days. If you are unable to log into Client Portal, you will need to contact your regional Client Services Center for assistance.
7. I’ve been issued an online security card which has expired
The on-line security card is intended to provide full access to both Client Portal and the trading platforms for a period of 21 days. This time frame, while limited, is intended to provide sufficient opportunity for the account holder to either regain possession of a temporarily unavailable security device or request and receive a replacement device.
If you are unable to log in using the on-line security card, you will need to contact your regional Client Services Center for assistance and to provide information as to the status of your permanent security device.
8. I’m awaiting delivery of my physical security device and can now no longer log into my account
Depending upon your location, the physical security device should be delivered to the address of record on your account within 2 days in the case of US residents and within 2 weeks for all other accounts. It’s important to note that the permanent devices are set to automatically activate after a set time frame if not yet manually activated by the account holder. If this is the case and you encounter difficulties logging into your account, please contact our Technical Assistance Department at 1-877-442-2757.
9. I am able to log into Client Portal with my temporary passcode but not the trading platform.
If your window of access to Client Portal using the temporary passcode remains, you may print or save the on-line security card through which full access to both Client Portal and the trading platforms is provided for a period of 21 days.
If you are unable to log into Client Portal, you will need to contact your regional Client Services Center for assistance.
10. I am in possession of my security device and wish to activate it.
To activate either a replacement device or one which was temporarily unavailable and which required issuance of a temporary passcode, you will need to log into Client Portal and select the reactivate security device menu option. Once reactivated, neither the temporary passcode nor on-line security card will remain operable.
11. Receiving “BAD CHARACTER” message after entering my user name.
Re-enter your user name and make sure that you do not include any spaces or characters which are not either alpha or numeric (e.g. !@#$%^&*(.,”:...etc.).
Overview of Secure Login System
Table of contents
- Benefits of Enrollment
- How to enroll
- Lost, Damaged or Temporarily Unavailable Device
- Types of Devices
- Withdrawal Limits
The security of your assets and personal information is of utmost concern to us and we are committed to taking the steps necessary to ensure you are protected from the moment you open your account.
To provide you with the highest level of security, Interactive Brokers has implemented a Secure Login System (SLS) through which access to your account is subject to Two-Factor Authentication.
Two-Factor Authentication serves to confirm your identity at the point of login using two security elements: 1) Something you know (your username and password combination); and 2) Something you have (an IBKR issued security device which generates a random, single-use security code). As both knowledge of your username/password and physical possession of the security device are required to login to your account, participation in the Secure Login System virtually eliminates the possibility of anyone other than you accessing your account.
Benefits of Enrollment
The principal benefit of SLS enrollment is to protect your account from unauthorized access. There is no fee associated with enrollment and participants have the added benefits of:
- Higher withdrawals thresholds over both single and five day rolling periods.
- Ability to change your banking instructions and email address without contact from a member of our Security Team.
- Ability to effect ACH & EFT funding transactions beyond an initial USD 20,000 account funding transaction.
- The ability to share a single device among multiple usernames registered to the same individual.
How to Enroll
Enrollment is easy. If you are a new applicant, you will be asked to confirm your mobile phone number to continue. This will enable two-factor security through SMS mobile phone messaging. IBKR will send you a one-time passcode upon login.
The SMS mobile two-factor authentication is temporary and will be removed once you activate the IBKR Mobile Authentication (IB Key), as explained in the IBKR Knowledge Base.
If you are a new or existing Client with equity above $1,000,000 you may request a Digital Secure Card+ (DSC+) as a complementary device to your IBKR Mobile Authentication (IB Key), as explained here. Once you have received your DSC+ device, log in to Client Portal and follow the instructions here to activate it.
Once your security device or digital security app is activated, each time you log in to Client Portal, TWS or IBKR Mobile, you will be required to enter two authentication factors – your username and password combination and the security code generated by your device. When you successfully log in, your account will be secured with full perimeter coverage, protecting both your cash and positions from unauthorized access."
Lost, Damaged or Temporarily Unavailable Device
In the case of a lost, damaged or temporarily unavailable security device, you will need to contact your regional Client Service Center via telephone to arrange for a replacement and/or to provide for interim access. Once your identity has been verified you will be provided a temporary passcode (i.e., a static alpha-numeric code which replaces the random code supplied by your security device) that will allow you to log into Client Portal and print the on-line security card. The on-line card will provide interim access for up to 21 days, sufficient time for a replacement device to be shipped or, should your device be temporarily unavailable, time to regain possession of it. See the IBKR Knowledge Base for instructions on requesting a replacement device.
Alternatively, if your mobile phone number has already been verified with IBKR, you can activate the IBKR Mobile Authentication (IB Key) to provide your account with an immediate two-factor protection.
Types of Devices
IBKR provides a range of security devices, each tailored to meet the portability and security needs of your particular account.
- SMS - A quick and easy way to complete the Two-Factor Authentication through text messages (SMS) sent to your mobile phone number.
- IBKR Mobile – An all-in-one mobile app offering a convenient digital solution for your Two-Factor Authentication needs. The IBKR Mobile Authentication (IB Key) module found within the app supports both fingerprint/facial recognition and PIN configuration1 and is available for both Android phones and iPhones.
- Digital Security Card+ - For accounts with an equity of $1M USD or equivalent. It has the same size and shape of a credit card and it is electronic, requiring the user to enter a PIN code as an additional layer of protection.
Note:
For iPhone users you must have either Touch ID, Face ID, or Passcode enabled (refer to: Set up Touch ID or Set up Face ID for directions). Touch ID or Face ID is the recommended choice. PIN/Passcode supports up to 12 hours of trading access while fingerprint/facial recognition allows for 30+ hours as long as you authenticate at least once during this time period. Please see further details mentioned in our User's guide for Extended Trading Access.
Withdrawal Limits
Clients who participate in the Secure Login System enjoy enhanced withdrawal capabilities, while clients who do not participate are subject to daily and weekly withdrawal restrictions. The amount that a participating client may withdraw or transfer over a given one- or five-day period increases commensurate with the protective value of the device and is outlined in the table below.
| Security Device | Maximum Withdrawal per Day | Maximum Withdrawal in 5 Business Days |
|---|---|---|
| None | 50K USD | 100K USD |
| SMS | 200K USD | 600K USD |
| IBKR Mobile Authentication (IB Key) | 1M USD | 1M USD |
| Security Code Card* | 200K USD | 600K USD |
| Digital Security Card* | 1M USD | 1.5M USD |
| Digital Security Card+ | Unlimited | Unlimited |
| Platinum*/Gold* | Unlimited | Unlimited |
Note: * Represents a legacy device no longer being issued.
Additional Information
See KB2636 for information and procedures related to Security Devices.
See KB2277 for complete details on IBKR Mobile Authentication (IB Key) for Android.
See KB2278 for complete details on IBKR Mobile Authentication (IB Key) for iOS.
Use cases where assistance with system access is required
Overview:
Please click on the use case below which best describes your login issue for guidance as to how to proceed:
I. No Access to Account Management or TWS
1. I forgot my User Name and/or password
2. I am temporarily without possession of my security device
3. My security device is lost or damaged
4. My temporary passcode has expired
5. My on-line security card has expired
II. Partial Access (Account Management only)
1. I am able to log into Account Management with my temporary passcode but not the trading platform
III. Full Access to both Account Management and TWS
1. I am in possession of my security device and wish to activate it.
For security purposes, all requests for assistance with a User Name and/or password must be initiated via telephone and require prior verification of the caller’s identity. Click here for a list of IB’s regional Customer Service center contact numbers.
If you are temporarily without possession of your security device, interim access may be provided by contacting your regional Customer Service center via telephone where, once your identity has been verified, you will be provided with a temporary passcode.
This temporary passcode is a static alpha-numeric code which replaces the random code supplied by your security device and which will provide full access to both Account Management and the trading platforms for 2 days. Should a lengthier period of interim access be necessary and to obtain enhanced protection, it is recommended that you use the temporary passcode to log into Account Management and print out the on-line security card which will operate as a replacement to your security device for up to 3 weeks.
After the expiration of the temporary passcode or on-line security card, or if you regain possession of your security device beforehand, you will need to log into Account Management and select the menu option to re-activate your security device.
In the case of a lost or damaged security device, you will need to contact our Customer Service center to arrange for a replacement and to provide for interim access. As the time frame for shipping a replacement device may range form 3 to 14 days depending upon your country of residence, interim access is provided via an on-line security card. The on-line security card may be retrieved for printing or saving as an image to your desktop once a temporary passcode has been provided for Account Management access.
The temporary passcode is intended to provide full access to both Account Management and the trading platforms for a period of 2 days. After 2 days, the temporary passcode may no longer be used to access the trading platforms but may be used to access Account Management for an additional period of 10 days. The Account Management access, however, is limited solely for the purpose of printing or saving the on-line security card.
If your window of access to Account Management using the temporary passcode remains, you may print or save the on-line security card through which full access to both Account Management and the trading platforms is provided for a period of 21 days. If you are unable to log into Account Management, you will need to contact your regional Customer Service center for assistance.
The on-line security card is intended to provide full access to both Account Management and the trading platforms for a period of 21 days. This time frame, while limited, is intended to provide sufficient opportunity for the account holder to either regain possession of a temporarily unavailable security device or request and receive a replacement device.
If you are unable to log in using the on-line security card, you will need to contact your regional Customer Service center for assistance and to provide information as to the status of your permanent security device.
If your window of access to Account Management using the temporary passcode remains, you may print or save the on-line security card through which full access to both Account Management and the trading platforms is provided for a period of 21 days.
If you are unable to log into Account Management, you will need to contact your regional Customer Service center for assistance.
To activate either a replacement device or one which was temporarily unavailable and which required issuance of a temporary passcode, you will need to log into Account Management and select the reactivate security device menu option. Once reactivated, neither the temporary passcode nor on-line security card will remain operable.
How to change the PIN of your Secure Login Device
Background:
Interactive Brokers recommends that you change your PIN regularly to add an extra layer of security.
NOTE: If you do not know your current PIN, you would need to call Interactive Brokers directly to have it reset. Please use any of the phone numbers listed under: ibkr.com/support
Below you will find the procedure for changing the PIN code of your Security Device, according to the device type you are currently using:
- Digital Security Card Plus (DSC+)
- IBKR Mobile for Android
(This procedure is not applicable to iOS devices because the PIN used is from your smartphone)
Digital Security Card Plus (DSC+)
The PIN of the DSC+ has to be changed from the Client Portal page, following the steps below:
- Log into Client Portal using your security device and click the Menu icon in the top-left.
- Select the menu options Settings --> User Settings --> Secure Login System
- Click on the wheel (Configure)
- Click the i (Information) icon next to your active DSC+
.png)
- Click on Change PIN in the lower right of the pop up
.png)
- Enter the new PIN you would like to use and confirm it. A Challenge Code will be displayed. Operate your DSC+ with the Challenge Code and your new PIN in order to generate a Response code. Enter it into the Passcode field and click Continue
.png)
- If the new PIN has been accepted by the system, you will see to a confirmation page. Click OK on the bottom right to complete the procedure.
IBKR Mobile for Android Users
.png)
Open the IBKR Mobile App.
-
Tap the Services button in te upper-left corner
- Tap the button Authenticate
-
Tap Change PIN. Some phones may require you to scroll down to see the option.
- Enter your username, password, current PIN, and your new PIN twice. Click Submit. Some phones may require you to scroll down to see all the items.
- The PIN has been successfully changed. Tap on Done.
Once the PIN has been successfully changed, you can close the IBKR Mobile app and log in to Client Portal or to your trading platform using the new PIN.
Determining SIPC coverage where multiple accounts exist
Multiple accounts maintained in the same name and taxpayer ID number are grouped for purposes of applying the maximum per client protection limits of $500,000 by SIPC and $29.5 million under Lloyd’s supplementary protection. However, if you hold accounts with IBKR in separate capacities (for example, an account in your name, a trust account of which you are the trustee or a beneficiary, or a joint account), then each account would be protected by SIPC and the supplementary protection up to the stated limits.
Links:
How can I request for a replacement secure login device or temporary security code?
IBKR is committed to protecting your account and your account assets from fraudulent practices. The Secure Login System provides an extra layer of security to your account. For security purposes, all replacement security device requests must be addressed via telephone and only after the identity of the named account holder or authorized user has been verbally verified. For assistance in accessing your account immediately and obtaining a replacement security device, please contact IBKR Client Services via telephone to restore login access.
References
- See KB69 for information about Temporary passcode validity
- See KB1131 for an overview of the Secure Login System
- See KB2636 for information and procedures related to Security Devices
- See KB2481 for instructions about sharing the Security Login Device between two or more users
- See KB2545 for instructions on how to opt back in to the Secure Login System
- See KB975 for instructions on how to return your security device to IB
- See KB2260 for instructions on activating the IB Key authentication via IBKR Mobile
- See KB2895 for information about Multiple 2Factor System (M2FS)
- See KB1861 for information about charges or expenses associated with the security devices
