Do I need to use two-factor authentication (2FA) when authenticating in the Web API?

Clients accessing the Web API using our CP Gateway tool must complete a manual login with their IBKR username and password, which in turn requires 2FA.

Institutional clients who access the Web API via token-based authentication methods like OAuth do not need to use 2FA.

Powered by IBot
Can I automate the Web API authentication process?
Can I use the Mobile Authenticator along with other security devices?
Who can use the IBKR's Web API?
Can I make requests to IBKR without running the local CP Gateway tool?