Overview
- We go to great lengths to keep client accounts secure. This document provides recommendations to safely operate and maintain your trading operations with us.
Monitor your account
- Regularly check your account balances and positions through TWS and the daily statements available in Client Portal
- Immediately report anything suspicious by contacting Client Services through any real-time method (live chat or phone call) listed here
Maintain Accurate Account Information
- In the event that we detect unusual or suspicious activity, being able to contact you is essential
- Accordingly, you should always ensure that the contact information you have provided (e.g. telephone numbers, email address) is always accurate
- To updated your contact information, log in to the Client Portal. From the main menu, select Settings > User Settings > Communication panel
Employ Safe Computing Practices
- Lock your computer if you are leaving it for a period of time by setting up a password protected screensaver. Always turn off your computer when you have finished using it. This recommendation is imperative for mobile computers and highly recommended for shared machines.
- Avoid accessing your brokerage account from public computers. Some of those may have been targeted by hackers and have a keystroke-capture software. If you must use a public computer, remember the following:
- Use the virtual keyboard on the login window to avoid having your keystrokes captured.
- Log out after accessing your account.
- Never leave the computer unattended while logged in.
- Clear the browser cache after logoff so that no sensitive information remains stored on the computer.
- Regularly check for security updates and patches for your operating system and use the most current version of your browser.
- Create separate profiles (user/password protected) if your computer is shared with a third party.
Protect your Data
Handle with caution pop-ups, unknown emails, and links
- Beware of phishing - phishers try to trick you into clicking on a link that may result in a security breach. Make sure that for sensitive information and login, you mouse over links and/or verify the website's address in your browser's address bar.
- We recommend that you use a pop-up blocker (sometimes integrated in your browser) and set its security filter to the highest possible level. Then either add our website to your list of "trusted" sites, or disable your pop-up blocker while using our website.
- Use email safely, and delete without opening messages that do not originate from a trusted source as they may contain harmful attachments or links, or may be an attempt to fraudulently obtain sensitive information. Turn off the "preview pane" in your email system as this function can allow some viruses to be executed even if you never open the email. Make sure that you add to your address book our email addresses.
Handle passwords securely
Mandatory Secure Login System (SLS)
- The Secure Login System provides an extra layer of security to your account at no charge through the use of a free physical security device or IBKR Mobile Authentication. The enrollment in our SLS program is mandatory.
- We offer the following solutions:
- SMS (automatic enrollment at account opening).
- IB Key Authentication via IBKR Mobile (available to all our clients - requires a smartphone).
- Digital Security Card + (available to accounts with a balance greater than 500K USD).
- We support multi-2FA, meaning whenever possible, we recommend users who have an active DSC+ to also activate IB Key on their smartphone.
- Click here for an Overview of our SLS Program
- Click here for an details on Mobile Authentication