Overview of Secure Login System

Table of contents


The security of your assets and personal information is of utmost concern to us and we are committed to taking the steps necessary to ensure you are protected from the moment you open your account.  

To provide you with the highest level of security, Interactive Brokers has implemented a Secure Login System (SLS) through which access to your account is subject to Two-Factor Authentication.
Two-Factor Authentication serves to confirm your identity at the point of login using two security elements: 1) Something you know (your username and password combination); and 2) Something you have (an IBKR issued security device which generates a random, single-use security code). As both knowledge of your username/password and physical possession of the security device are required to login to your account, participation in the Secure Login System virtually eliminates the possibility of anyone other than you accessing your account.

Benefits of Enrollment

The principal benefit of SLS enrollment is to protect your account from unauthorized access. There is no fee associated with enrollment and participants have the added benefits of:
  1. Higher withdrawals thresholds over both single and five day rolling periods.
  2. Ability to change your banking instructions and email address without contact from a member of our Security Team.
  3. Ability to effect ACH & EFT funding transactions beyond an initial USD 20,000 account funding transaction.
  4. The ability to share a single device among multiple usernames registered to the same individual.

How to Enroll

Enrollment is easy. If you are a new applicant, you will be asked to confirm your mobile phone number to continue. This will enable two-factor security through SMS mobile phone messaging. IBKR will send you a one-time passcode upon login.
The SMS mobile two-factor authentication is temporary and will be removed once you activate the IBKR Mobile Authentication (IB Key), as explained in the IBKR Knowledge Base.
If you are a new or existing Client with equity above $1,000,000 you may request a Digital Secure Card+ (DSC+) as a complementary device to your IBKR Mobile Authentication (IB Key), as explained here. Once you have received your DSC+ device, log in to Client Portal and follow the instructions here to activate it.
Once your security device or digital security app is activated, each time you log in to Client Portal, TWS or IBKR Mobile, you will be required to enter two authentication factors – your username and password combination and the security code generated by your device. When you successfully log in, your account will be secured with full perimeter coverage, protecting both your cash and positions from unauthorized access."



Lost, Damaged or Temporarily Unavailable Device

In the case of a lost, damaged or temporarily unavailable security device, you will need to contact your regional Client Service Center via telephone to arrange for a replacement and/or to provide for interim access. Once your identity has been verified you will be provided a temporary passcode (i.e., a static alpha-numeric code which replaces the random code supplied by your security device) that will allow you to log into Client Portal and print the on-line security card. The on-line card will provide interim access for up to 21 days, sufficient time for a replacement device to be shipped or, should your device be temporarily unavailable, time to regain possession of it. See the IBKR Knowledge Base for instructions on requesting a replacement device.
Alternatively, if your mobile phone number has already been verified with IBKR, you can activate the IBKR Mobile Authentication (IB Key) to provide your account with an immediate two-factor protection.

Types of Devices

IBKR provides a range of security devices, each tailored to meet the portability and security needs of your particular account. 
  1. SMS - A quick and easy way to complete the Two-Factor Authentication through text messages (SMS) sent to your mobile phone number.
  2. IBKR Mobile – An all-in-one mobile app offering a convenient digital solution for your Two-Factor Authentication needs. The IBKR Mobile Authentication (IB Key) module found within the app supports both fingerprint/facial recognition and PIN configuration1 and is available for both Android phones and iPhones.
  3. Digital Security Card+ - For accounts with an equity of $1M USD or equivalent. It has the same size and shape of a credit card and it is electronic, requiring the user to enter a PIN code as an additional layer of protection.
For iPhone users you must have either Touch ID, Face ID, or Passcode enabled (refer to: Set up Touch ID or Set up Face ID for directions). Touch ID or Face ID is the recommended choice.  PIN/Passcode supports up to 12 hours of trading access while fingerprint/facial recognition allows for 30+ hours as long as you authenticate at least once during this time period. Please see further details mentioned in our User's guide for Extended Trading Access.


Withdrawal Limits

Clients who participate in the Secure Login System enjoy enhanced withdrawal capabilities, while clients who do not participate are subject to daily and weekly withdrawal restrictions. The amount that a participating client may withdraw or transfer over a given one- or five-day period increases commensurate with the protective value of the device and is outlined in the table below.

Security Device Maximum Withdrawal per Day Maximum Withdrawal in 5 Business Days
None 50K USD 100K USD
IBKR Mobile Authentication (IB Key) 1M USD 1M USD
Security Code Card* 200K USD 600K USD
Digital Security Card* 1M USD 1.5M USD
Digital Security Card+ Unlimited Unlimited
Platinum*/Gold* Unlimited Unlimited
Note: * Represents a legacy device no longer being issued.

Back to top


Additional Information 

See KB2636 for information and procedures related to Security Devices.
See KB2277 for complete details on IBKR Mobile Authentication (IB Key) for Android.
See KB2278 for complete details on IBKR Mobile Authentication (IB Key) for iOS.