How to Turn On 2FA for Interactive Brokers

Please note: Specific instructions for enabling 2FA are subject to change without notice. Please check with each website or app for the most up-to-date information on this feature.

To provide you with the highest level of online security, Interactive Brokers has implemented a Secure Login System (SLS) through which access to your account is subject to two-factor authentication. Two-factor authentication serves to confirm your identity at the point of login using two security factors: 1) something you know (your username and password combination); and 2) something you have (an IB-issued security device that generates a random, single-use security code). As both knowledge of your username/password and physical possession of the security device are required to login to your account, participation in the SLS virtually eliminates the possibility of anyone other than you accessing your account.

Enrollment is easy. New applicants will be provided with an email link with instructions for printing and activating an online security card during the account configuration step of the online application. This online card is intended as a temporary device, expiring 21 days after your account has been funded, during which time a permanent device will be shipped to you.

Once you receive your permanent device and follow the instructions for its activation, your online card will be automatically deactivated and may be disposed. It’s important to note that the permanent devices are set to automatically activate after a set time frame if not manually activated by the account holder.

If you choose to use the SDSA (Smartphone Digital Security Application) you will need to validate your phone number.

  1. From the Manage Account menu select Security.

  2. Then select Secure Login System, followed by Smartphone Authentication.

  3. Follow the on-screen instructions to confirm your phone number. (Detailed instructions are available at

It’s easy to securely log into your IB application, such as TWS, Account Management or WebTrader, using your Security Code Card. Simply find and enter the correct values from your card into the PassCode Authentication Box on the IB website.

  1. Start by logging into your IB application as always, using your IB username and password.

    The PassCode Card Authentication box pops up.

  2. Locate the first Index number in the authentication box.

    In the example, the first Index number is “100.”

  3. Using your Security Code Card, locate that Index number, and look immediately to the right to find its corresponding card value.

    In the example the Index number “100” has a corresponding card value of A3D.

  4. Type that value in the entry field of the PassCode Card Authentication box on the website.

  5. Follow steps 2 and 3 above for the next Index number.

    In our example, the second Index number is “50” and its corresponding card value is Z3V..

  6. Click the Submit button.

It’s easy to securely log into any IB application, including TWS, Account Management or WebTrader, using your Digital Security Card. Simply enter your pin into the device to generate a string of randomly-generated characters, and enter these characters into the Security Code field in the login box.

  1. Firmly press and hold the “press” button between thumb and index finger until the [ ] symbol displays in the digital display (about 2 seconds).

  2. Enter your four-digit PIN using the number pad and touch the OK button. The PIN is the number that you specified when you ordered your digital security card. The numbers and OK and C (for Clear) buttons are sensitive to light pressure held for a duration long enough to cause the digit to appear in the display.Note: you can only see the digit you just typed, and that each previous digit is replaced with a dash so that you can never see all the four digits on the digital display. For example, the display after the first three digits (of 1-2-3-4 pin) have been entered would appear as [ – – 3 _ ]

  3. When you have entered your PIN, tap OK to display the six-digit secure token passcode in the digital display.Note: The passcode will only display for around 15 seconds, and you must enter the passcode within 30 seconds; otherwise, please repeat steps 1-3 above.

NOTE: The Security Code field will look slightly different depending on the application you’re logging into. In the images here, “A” shows the Account Management login and “B” shows the TWS login.

Securely log into any IB application, including TWS, Account Management or WebTrader, using IB’s Digital Security Card+.

  1. Press the round “press” button until the “Pn” symbol displays in the digital display (about 2 seconds).

  2. Using the numbers keyboard on the card, enter the four-digit PIN you specified and then press OK.

  3. When the “Ch” symbol appears in the digital display, enter the six-digit challenge code (with no spaces) shown on the login or entry screen and press OK.

  4. The first five digits of the eight-digit passcode appear in the digital display. Enter these digits in the Secure Token Passcode field on the login or entry screen.

  5. Press OK to see the remaining three digits, and enter these three digits in the Secure Token Passcode field to complete the eight-digit passcode.

The sets of five and three digits will automatically toggle every 10 seconds. To manually toggle between the first five and last three digits, press the OK button. If the passcode expires, start over from Step 1 above.

NOTE: The Security Code field will look slightly different depending on the application you’re logging into.

Securely log into any IB application, including TWS, Account Management or WebTrader using IB’s sDSA (Smartphone Digital Security Application).

  1. Enter your username and password into the trading platform or Account Management login screen and click on the Login button. If correct, you will be presented with a number sequence referred to as the Challenge code.

  2. Launch the sDSA app on your Smartphone.

  3. Enter the PIN or scan fingerprint used during the installation step, followed by the Challenge code, into your Smartphone and select the Generate button; a Response string will appear.

  4. Enter the Response string from your Smartphone into the log in screen and click on the Login button. If you are logging into an IB system using the phone with the sDSA app, simply tap on the Copy button to copy the numbers and paste them in the corresponding field on your mobile application or browser.

For more information visit:

All trademarks are property of their respective owners. This site makes every reasonable effort to keep the information accurate and up-to-date. If you have feedback regarding the instructions above, please email

Two-factor authentication (2FA)
Learn more
2FA for the sites and apps you use
Learn more