This page covers specific points on what the Multiple 2-Factor System (M2FS) is and how it functions. For general questions on the Secure Login System, please refer to KB1131.
M2FS allows any client to maintain more than one active security device at the same time. You no longer need to choose between a physical security device and the IBKR Mobile app as either can be used interchangeably. If you already possess an active security device, any further device activation will result in both devices remaining simultaneously active.
In case you currently use the Security Code Card / Digital Security Card+: if you use a physical security device, you may download and activate the IBKR Mobile app. Please refer to the directions for Android and iOS.
In case you currently use the IBKR Mobile app: If you use the IBKR Mobile app and have an account with a balance equal or greater than USD 500K, you qualify for the Digital Security Card+ . You may log in to Client Portal and request the DSC+ by following the instructions here.
Once you have both a physical device and the IBKR Mobile app enabled, M2FS is represented by a drop-down menu upon login. You can now choose the device you wish to authenticate with, following the below steps:
1. Enter your username and password into the trading platform or Client Portal login screen and click Login. If the credentials have been accepted, a drop down will appear, allowing you to Select Second Factor Device. If you log in to the TWS, please notice that the M2FS is supported from version 966.
TWS:
Client Portal:
2. Once you select a security device, you will now be presented with the corresponding screen for authentication. Refer to the directions for:
- IB Key via IBKR Mobile (iOS)
- IB Key via IBKR Mobile (Android)
- Security Code Card
- Digital Security Card+
3. If the second factor authentication succeeds, the Log-in will now automatically proceed.
The device used to authenticate your withdrawal will define your withdrawal limits, according to the below table:
Security Device |
Maximum Withdrawal |
Maximum Withdrawal |
Security Code Card1 | USD 200,000 | USD 600,000 |
IBKR Mobile app | USD 1,000,000 | USD 1,000,000 |
Digital Security Card1 | USD 1,000,000 | USD 1,500,000 |
Digital Security Card+ | Unlimited | Unlimited |
Gold Device1 | Unlimited | Unlimited |
Platinum Device1 | Unlimited | Unlimited |
1: Represents a legacy device that is no longer issued.
Example: You have both the IBKR Mobile app and the Digital Security Card+ enabled and you need to withdrawal more than USD 200K. You can use either device to login to Client Portal but you will be required to use the Digital Security Card+ to confirm your withdrawal request.
M2FS provides even more flexibility to IBKR's Secure Login System by allowing you to choose what security device you want to authenticate with. In addition to the convenience of using a device which is trusted and routinely accessible, you can eliminate delays associated with authenticating at times a trade needs to be entered quickly.
The recovery procedure explained in this article is required in case:
In order to re-enable IBKR Mobile Authentication (IB Key), please click on one of the below links, according to your smartphone Operating System
This procedure has proved to work as a solution for several issues, since it produces a complete reset of the malfunctioning IBKR app.
1. Go to your phone's Settings Menu
2. Below the Phone section, select Applications Application Manager
3. Scroll down and select the corresponding IB app which needs to be reset.
4. Tap on Storage
5. Tap on Clear Data OK
6. Confirm Data has been cleared.
7. Reboot the phone
8. Re-Launch app
Note: If after clearing the cache, manually adjusting the permissions and restarting your Android Device, the issue persists, please contact IB Customer Service for further troubleshooting.
The Digital Security Card (DSC) is a battery operated security device which generates a series of random codes to be entered along with your user name and password upon each log in attempt. As physical possession of the DSC is required to obtain the codes and log in, the device effectively prevents hackers who may have compromised your computer or information from accessing your account. Instructions for operating the DSC are outlined below.
Step 1 - When logging into your account, enter your user name and password as usual. If successful, a 6-digit Challenge Code will appear.
Step 2 - Turn on your device by pressing the “press” button until the 'PIN>' display appears, enter the 4-digit PIN code you specified at the time you requested the device and press the “OK” button.
Step 3 - Enter the 6-digit Challenge Code from the login screen (step A) into the device when the 'CHALLNG>' display appears, press the “OK” button and a response code will appear.
Step 4 - Enter the 8 digits of the response code (Step C) into the login Screen. Select the Login button to proceed.
Note that the buttons on your security cards are not touch sensitive and must to be pressed to operate.
Related Articles
KB1042 - Video instructions for logging in with the Secure Code Card
KB1942 - Reactivating the permanent Secure Login Device
KB1943 - Requesting a replacement Secure Login Device
KB1131 - Overview of the Secure Login System
Clients who have performed an opt-out from the Secure Login System (SLS) program expose themselves to certain risks and are therefore subject to certain restrictions (e.g. ability to trade Pink Sheet and OTCBB stocks). Considering this, along with the protection benefits afforded through a complete SLS protection, you may decide to opt back into the Secure Login System. The following article provides the step-by-step instructions for accomplishing this.
Please note that in order to modify the security settings for an account, the primary user needs to login to the Client Portal. If your user is not allowed to change the security settings, the system will show you a notice and will point you to the user which has such rights.
In order to opt back into the Secure Login System, please proceed as follows:
1. Open your browser and go to the web page ibkr.com.
References
IBKR allows individuals to maintain multiple user names within a single account or across distinct accounts under their control. Individuals who do not wish to maintain multiple physical security devices may elect to consolidate and share a single device across their users. The prerequisites and the procedure for sharing devices are outlined below.
The possibility of sharing a physical security device will be granted only if ALL the conditions below are respected:
a) The participant users belong either to the same entity or to different entities but with the same identification data (Date of Birth, Citizenship, Country of Legal Residence, Identification Document type and number or Social Security Number for US Citizens and residents).
b) The participant users do NOT have a temporary security device (Temporary Code, Online Security Code Card) currently assigned to them.
Security level |
Device name |
Device image |
Highest | Digital Security Card+ (DSC+) | |
Lowest | Security Code Card (SLS card) |
1. Among the possible candidates, identify the device offering the highest level of protection and the user that device belongs to. We will call that user the device owner
2. Log in to your Client Portal page with the requesting user (NOT the device owner)
a. In the vast majority of cases your sharing request will be automatically and immediately approved, processed and enforced. In case the approval of our Compliance department is needed, your request will stay in a pending status until this step has been cleared.
c. Here below you can see the most common error messages and their causes:
- Less secure device: This error is returned if you set up the less secure token as the one to be shared. Please identify the most secure device and share that one.
This page covers specific points of installing and using IBKR Mobile Authentication (IB Key) on iOS devices. For general questions on IBKR Mobile Authentication (IB Key), please refer to KB2260.
You can download IBKR Mobile app on your iPhone directly from the App Store.
How to download IBKR Mobile from the App Store:
1. On your iPhone tap on the App Store icon.
2. Click on the Search icon (magnifying glass) in the lower right corner, then click in the search bar at the top, type IBKR Mobile then click Search.
3. Look for IBKR Mobile from Interactive Brokers LLC, tap on GET to the right, then tap INSTALL (Figure 1.).
(if prompted, enter your Apple ID password or provide your fingerprint.)
4. Once the installation has completed, tap on Open to launch the IBKR Mobile app (Figure 2.).
Figure 1. Figure 2.
Once the app is installed on your device you will need to activate it for the username you would like to enroll. This operation happens entirely on your phone, requires Internet access and the ability to receive SMS (text message).
1.a. If you're opening IBKR Mobile for the first time since its installation, you will receive a message asking your consent for IBKR notifications (Figure 3.), tap Allow and proceed with step 2.
1.b. If when opening IBKR Mobile you land on the login screen, tap Services on the top left (Figure 4.) and proceed with step 2.
1.c. If when opening IBKR Mobile you land on your Home Page, Portfolio, Watchlists, or similar, tap More on the bottom-right (Figure 5.). Then tap Two-Factor Authentication (Figure 6.), followed by Activate IB Key (Figure 7.) and proceed with step 2.
Figure 3. Figure 4.
Figure 5. Figure 6. Figure 7.
2. Tap on Register Two-Factor (Figure 8.), review the instructions and click Continue (Figure 9.).
Figure 8. Figure 9.
3. Enter your Account Username and Password then tap Continue.
Figure 10. Figure 11.
4. The default mobile phone number on record for your account will be already selected. If you are not able to receive text messages (SMS) on that number, you should choose a different one from the list (if applicable) or add a new one. To add a new mobile phone number, tap Add Phone number, enter the new number1 and corresponding Country. Once you have selected your preferred mobile number from the list or added the new mobile number, tap Get Activation SMS (Figure 12.).
Figure 12.
5. An SMS message will be sent with an Activation Token. Enter the token in the Activation Code field. Then tap Activate.
Figure 13. Figure 14. Figure 15.
6. According to your phone hardware capabilities, you might be prompted to provide or define the security element used to secure the app (Fingerprint, Face ID or PIN2). Please provide the requested security element.
Figure 16.
7. If the activation has been successful, you will see a confirmation screen. Tap Done to finalize the procedure.
Figure 17. Figure 18.
Once the IBKR Mobile Authentication (IB Key) has been activated, you can close the app. Refer to Operation with Touch ID or Operation with Face ID below on how to use IBKR Mobile for authentication.
The recovery PIN will be used to enable additional users or re-enable IBKR Mobile if it has been uninstalled. It must be at least 4 and up to 6 characters (letters, numbers and special characters allowed). Refer to KB2269 for additional guidelines.
Once activated, operation of IBKR Mobile Authentication (IB Key) using Touch ID is as follows:
IMPORTANT NOTE: If you do not have Internet access while operating IBKR Mobile, please refer to the section "What if I don't receive the notification?"
1) Enter your username and password into the trading platform or Client Portal login screen and click Login. If correct, a notification will be sent to your iPhone.
Figure 19.
2) On your iPhone, check your notifications panel and select the IBKR Mobile app notification.
Figure 20.
3) Selecting the notification will launch the IBKR Mobile Authentication (IB Key). On your iPhone, place your finger that was registered for Touch ID on the Home Button. If the Touch ID has not been activated, IB Key will prompt you to enter the Passcode.
Figure 21. Figure 22. Figure 23.
4) If authentication succeeds, the log in will now automatically proceed.
Figure 24.
Once activated, operation of IBKR Mobile Authentication (IB Key) using Face ID is as follows:
IMPORTANT NOTE: If you do not have Internet access while operating IBKR Mobile, please refer to the section "What if I don't receive the notification?"
1) Enter your username and password into the trading platform or Client Portal login screen and click Login. If correct, a notification will be sent to your iPhone.
Figure 25.
2) On your iPhone, check your notification menu and select the IBKR Mobile app notification.
Figure 26.
3) Selecting the notification will launch the IBKR Mobile Authentication (IB Key). On your iPhone, look at the screen to authenticate via Face ID. If Face ID has not been activated, IB Key will prompt you to enter the Passcode.
Figure 27. Figure 28. Figure 29.
4) If authentication succeeds, the log in will now automatically proceed.
Figure 30.
If the notification does not reach your phone, it may be because notifications are disabled, no internet access is available or you have a poor, unstable connection. In these cases operation of IBKR Mobile Authentication (IB Key) is as follows:
1) Click the link Click here if you do not receive the notification.
Figure 31.
2) This will generate challenge code and box to enter response.
Figure 32.
3) Launch IBKR Mobile on your Smartphone, then select Authenticate. Type the Challenge number into the corresponding box.
Figure 33. Figure 34.
4) If you use Touch ID, place your finger that was registered on the Home Button. If the Touch ID has not been activated, IBKR Mobile will prompt you to enter the Passcode. A response string will be generated. If you use Face ID, skip this step and go to the next one.
Figure 35. Figure 36.
5) If you use Face ID, look at the screen to authenticate via Face ID. If Face ID has not been activated, IB Key will prompt you to enter the Passcode. A response string will be generated.
Figure 37. Figure 38.
6) Enter the response from your iPhone into the log in screen and click OK.
Figure 39.
7) If authentication succeeds, the log in will now automatically proceed.
Figure 40.
Back to top
This page covers specific points of installing IBKR Mobile and using the IBKR Mobile Authentication (IB Key) for Android devices. For general questions on the IBKR Mobile Authentication (IB Key), please refer to KB2260.
You can download the IBKR Mobile app on your smartphone directly from;
Google Play Store , 360 Mobile Assistant or Baidu Mobile Assistant.
Figure 1. Figure 2.
Back to top
Once the app has been installed on your device you will need to activate it for the username you would like to enroll. This operation happens entirely on your phone, requires Internet access and the ability to receive SMS (text message).
1. On your phone open the IBKR Mobile app:
1.a. If you're opening IBKR Mobile for the first time since its installation, proceed to step 2.
1.b. If when opening IBKR Mobile you land on the login screen, tap Services on the top left (Figure 3.) and proceed with step 2.
1.c. If when opening IBKR Mobile you land on your Home Page, Portfolio, Watchlists, or similar, tap the Menu icon on the top-left (Figure 4.). Then tap Two-factor Authentication (Figure 5.), followed by Activate IB Key (Figure 6.) and proceed with step 2.
Figure 3. Figure 4. Figure 5.
Figure 6.
2. Tap Register Two-Factor (Figure 7.), review the instructions and tap Continue (Figure 8.).
Figure 7. Figure 8.
3. Enter your IBKR Account Username and Password then tap Continue.
Figure 9.
4. The default mobile phone number on record for your account will be already selected. If you are not able to receive text messages (SMS) on that number, you should choose a different one from the list (if applicable) or add a new one. To add a new mobile phone number, tap Add Phone Number, enter the new number1 and corresponding Country. Once you have selected your preferred mobile number from the list or added the new mobile number, tap Get Activation Code.
Figure 10.
5. An SMS message will be sent with an Activation Token. Enter the token in the Activation Code field, create a PIN2 then tap Activate.
Figure 11. Figure 12.
6. You will receive a message with the outcome of the operation. Tap Done to finalize the procedure (Figure 13.).
Figure 13. Figure 14.
Once the IBKR Mobile Authentication (IB Key) has been activated, you can close the app. Refer to Operation instructions below on how to use the authentication module.
Once activated, you can use the IBKR Mobile Authentication (IB Key) to validate your login attempt as follows:
IMPORTANT NOTE: If you do not have Internet access while operating the IBKR Mobile, please refer to the section "What if I do not receive the notification?"
1) Enter your IBKR Account credentials into your trading platform or Client Portal login screen and click Login. If your credentials have been accepted, a notification will be sent to your phone.
Figure 15.
2) On your phone, swipe down from the top and check your notification drawer. Tap on the IBKR Mobile notification. If you have not received the notification, please refer to KB3234.
Figure 16.
3) The IBKR Mobile Authentication (IB Key) will open, prompting you for your fingerprint or your PIN, according to the hardware capabilities of your phone. Please provide the requested security element.
Figure 17. Figure 18.
4) If the authentication has succeeded, the trading platform or Client Portal login process will automatically move ahead to the next phases.
Figure 19.
Back to topIf the notification does not reach your phone, it may be because notifications are disabled, no internet access is available or you have a poor, unstable connection. In these cases the seamless authentication may not be available but you can still use the manual Challenge/Response authentication method as described below:
1) On your trading platform or Client Portal login screen, click the link "Click here if you do not receive the notification" .
Figure 20.
2) A Challenge code will be displayed on the screen.
Figure 21.
3) Launch the IBKR Mobile app on your Smartphone, select Authenticate (if necessary), enter your PIN and the Challenge code you obtained in the previous step. Tap Generate Passcode.
Figure 22. Figure 23.
4) A Response String will be displayed.
Figure 24.
5) Enter the Response String into your trading platform or Client Portal login screen. Then click OK.
Figure 25.
6) If the authentication has succeeded, the trading platform or Client Portal login process will automatically move ahead to the next phases.
Figure 26.
The below steps are required in order to:
1. Notify IBKR Client Services- Contact IBKR Client Services to obtain a temporary account access. This service can only be provided via telephone and requires the identity of the account holder to be verified, as detailed in the IBKR Knowledge Base.
2. Obtain an Online Security Code Card - Activate an Online Security Code Card, which offers enhanced protection and full Client Portal functionality for an extended period of 21 days. Please consult the IBKR Knowledge Base should you need guidance for this specific step.
3. Request the DSC+ replacement - Once you have completed the Online Security Code Card activation, please remain in the Secure Login System section of the Client Portal and order your replacement DSC.
1. Click on the button Request Physical Device.
3. Enter a four-digit Soft PIN1 for your DSC+. Please make sure to remember the PIN you are typing since it will be necessary to activate and to operate your device. When applicable and desired, you may change the account on which the 20 USD deposit will be kept on hold2. Complete this step by clicking on Continue.
4. The system will show you a summary of your selection. Please make sure the information displayed is correct. Should you need to perform changes, click on the white Back button under the information field (not your browser back button), otherwise submit the request by clicking on Continue.
5. You will receive a final confirmation containing the estimated shipment date3. Click on Ok to finalize the procedure.
1. For PIN guidelines, please consult the IBKR Knowledge Base.
2. The Security token and the shipment are both free of charge. Nevertheless, when you order your device, we will freeze a small amount of your funds (20 USD). If your device is lost, intentionally damaged, stolen or if you close your account without returning it to IBKR, we will use that amount as a compensation for the loss of the hardware. In any other case, the hold will be released once your device has been returned to IBKR. More details on the IBKR Knowledge Base.
3. For security reasons, the replacement device is set to auto-activate within three weeks from the shipment date. IBKR will notify you when the auto-activation is approaching and when it is imminent.