Interactive Brokers: Difference between revisions

(One intermediate revision by one other user not shown)

Line 42:

====Deceptive MFA options====

Interactive Brokers requires the use of Two-Factor Authentication to access their services.<ref>{{Cite web |date=2025-08-07 |title=Two-Factor Authentication Methods |url=https://www.ibkrguides.com/securelogin/sls/twofactorauth.htm |url-status=live |access-date=2025-10-13 |website=IBKR Guides |archive-url=http://web.archive.org/web/20260207202720/https://ibkrguides.com/securelogin/sls/twofactorauth.htm |archive-date=7 Feb 2026}}</ref> They heavily push for the use of their application: IBKR Mobile to provide a TOTP challenge code. While their website states you can use a third party, offline authentication app, they do not provide any guides on how to set up an authentication app. If asked about this, they will tell you your only option is to install their application. For users with devices that do not support [[wikipedia:Google_Play_Services|Google Play Services]] (or [[Google Mobile Services]] (GMS)) or the Apple Store, they will not provide you with a signed APK and verified signing key upon request. The link to the article about using a 3rd Party Authenticator is the same as the IBKR Mobile one.<ref>{{Cite web |date=2025-08-07 |title=IBKR Mobile - IB Key Authentication |url=https://www.ibkrguides.com/securelogin/sls/ibkrmobile.htm |url-status=live |access-date=2025-10-13 |website=IBKR Guides}}</ref>

Interactive Brokers requires the use of Two-Factor Authentication to access their services.<ref>{{Cite web |date=2025-08-07 |title=Two-Factor Authentication Methods |url=https://www.ibkrguides.com/securelogin/sls/twofactorauth.htm |url-status=live |access-date=2025-10-13 |website=IBKR Guides |archive-url=http://web.archive.org/web/20260207202720/https://ibkrguides.com/securelogin/sls/twofactorauth.htm |archive-date=7 Feb 2026}}</ref> They heavily push for the use of their application: IBKR Mobile to provide a TOTP challenge code. While their website states you can use a third party, offline authentication app, they do not provide any guides on how to set up an authentication app. If asked about this, they will tell you your only option is to install their application. For users with devices that do not support [[wikipedia:Google_Play_Services|Google Play Services]] (or [[Google Mobile Services]] (GMS)) or the Apple Store, they will not provide you with a signed APK and verified signing key upon request. The link to the article about using a 3rd Party Authenticator is the same as the IBKR Mobile one.<ref>{{Cite web |date=2025-08-07 |title=IBKR Mobile - IB Key Authentication |url=https://www.ibkrguides.com/securelogin/sls/ibkrmobile.htm |url-status=live |access-date=2025-10-13 |website=IBKR Guides |archive-url=http://web.archive.org/web/20251124152231/https://ibkrguides.com/securelogin/sls/ibkrmobile.htm |archive-date=24 Nov 2025}}</ref>

While no information is provided by Interactive Brokers' on their website on how to set up a 3rd Party TOTP Authenticator, it is possible to obtain a secret key by navigating through Settings > Security: Secure Login System > Mobile Authenticator and copying the secret key above the QR code into your Authenticator such as [https://keepassxc.org/docs/KeePassXC_UserGuide#_adding_totp_to_an_entry KeepassXC] or the [https://authenticator.cc/ Authenticator Browser Extension]

====Third Party Biometrics with Au10tix====

During initial signup, or as an alternative to secure verification without a MFA Challenge Code, SMS Token or denial of alternative Security Authentication such as Security Questions, you will be asked for ID Verification through the third party biometrics service provider Au10tix. As apart of their privacy policy, Aut10tix may retain client data indefinitely, and at a minimum of 3 years even upon request.<ref>{{Cite web |date=2025-10-13 |title=Au10tix - Biometric Data Policy |url=https://www.au10tix.com/legal/biometric-data-policy/ |url-status=live ~~|archive-date=~~ |access-date=2025-10-13 |website=Au10tix |archive-url=http://web.archive.org/web/20251127091042/https://www.au10tix.com/legal/biometric-data-policy/ |archive-date=27 Nov 2025}}</ref> You can state that you do not consent to third party biometric collection and they will be able to direct you to a manual verification process whereby you can email your ID.

During initial signup, or as an alternative to secure verification without a MFA Challenge Code, SMS Token or denial of alternative Security Authentication such as Security Questions, you will be asked for ID Verification through the third party biometrics service provider Au10tix. As apart of their privacy policy, Aut10tix may retain client data indefinitely, and at a minimum of 3 years even upon request.<ref>{{Cite web |date=2025-10-13 |title=Au10tix - Biometric Data Policy |url=https://www.au10tix.com/legal/biometric-data-policy/ |url-status=live |access-date=2025-10-13 |website=Au10tix |archive-url=http://web.archive.org/web/20251127091042/https://www.au10tix.com/legal/biometric-data-policy/ |archive-date=27 Nov 2025}}</ref> You can state that you do not consent to third party biometric collection and they will be able to direct you to a manual verification process whereby you can email your ID.

==References==

[[Category:Interactive Brokers]]

@@ Line 42: / Line 42: @@
 ====Deceptive MFA options====
-Interactive Brokers requires the use of Two-Factor Authentication to access their services.<ref>{{Cite web |date=2025-08-07 |title=Two-Factor Authentication Methods |url=https://www.ibkrguides.com/securelogin/sls/twofactorauth.htm |url-status=live |access-date=2025-10-13 |website=IBKR Guides |archive-url=http://web.archive.org/web/20260207202720/https://ibkrguides.com/securelogin/sls/twofactorauth.htm |archive-date=7 Feb 2026}}</ref> They heavily push for the use of their application: IBKR Mobile to provide a TOTP challenge code. While their website states you can use a third party, offline authentication app, they do not provide any guides on how to set up an authentication app. If asked about this, they will tell you your only option is to install their application. For users with devices that do not support [[wikipedia:Google_Play_Services|Google Play Services]] (or [[Google Mobile Services]] (GMS)) or the Apple Store, they will not provide you with a signed APK and verified signing key upon request. The link to the article about using a 3rd Party Authenticator is the same as the IBKR Mobile one.<ref>{{Cite web |date=2025-08-07 |title=IBKR Mobile - IB Key Authentication |url=https://www.ibkrguides.com/securelogin/sls/ibkrmobile.htm |url-status=live |access-date=2025-10-13 |website=IBKR Guides}}</ref>
+Interactive Brokers requires the use of Two-Factor Authentication to access their services.<ref>{{Cite web |date=2025-08-07 |title=Two-Factor Authentication Methods |url=https://www.ibkrguides.com/securelogin/sls/twofactorauth.htm |url-status=live |access-date=2025-10-13 |website=IBKR Guides |archive-url=http://web.archive.org/web/20260207202720/https://ibkrguides.com/securelogin/sls/twofactorauth.htm |archive-date=7 Feb 2026}}</ref> They heavily push for the use of their application: IBKR Mobile to provide a TOTP challenge code. While their website states you can use a third party, offline authentication app, they do not provide any guides on how to set up an authentication app. If asked about this, they will tell you your only option is to install their application. For users with devices that do not support [[wikipedia:Google_Play_Services|Google Play Services]] (or [[Google Mobile Services]] (GMS)) or the Apple Store, they will not provide you with a signed APK and verified signing key upon request. The link to the article about using a 3rd Party Authenticator is the same as the IBKR Mobile one.<ref>{{Cite web |date=2025-08-07 |title=IBKR Mobile - IB Key Authentication |url=https://www.ibkrguides.com/securelogin/sls/ibkrmobile.htm |url-status=live |access-date=2025-10-13 |website=IBKR Guides |archive-url=http://web.archive.org/web/20251124152231/https://ibkrguides.com/securelogin/sls/ibkrmobile.htm |archive-date=24 Nov 2025}}</ref>
 While no information is provided by Interactive Brokers' on their website on how to set up a 3rd Party TOTP Authenticator, it is possible to obtain a secret key by navigating through Settings > Security: Secure Login System > Mobile Authenticator and copying the secret key above the QR code into your Authenticator such as [https://keepassxc.org/docs/KeePassXC_UserGuide#_adding_totp_to_an_entry KeepassXC] or the [https://authenticator.cc/ Authenticator Browser Extension]
 ====Third Party Biometrics with Au10tix====
-During initial signup, or as an alternative to secure verification without a MFA Challenge Code, SMS Token or denial of alternative Security Authentication such as Security Questions, you will be asked for ID Verification through the third party biometrics service provider Au10tix. As apart of their privacy policy, Aut10tix may retain client data indefinitely, and at a minimum of 3 years even upon request.<ref>{{Cite web |date=2025-10-13 |title=Au10tix - Biometric Data Policy |url=https://www.au10tix.com/legal/biometric-data-policy/ |url-status=live |archive-date= |access-date=2025-10-13 |website=Au10tix |archive-url=http://web.archive.org/web/20251127091042/https://www.au10tix.com/legal/biometric-data-policy/ |archive-date=27 Nov 2025}}</ref> You can state that you do not consent to third party biometric collection and they will be able to direct you to a manual verification process whereby you can email your ID.
+During initial signup, or as an alternative to secure verification without a MFA Challenge Code, SMS Token or denial of alternative Security Authentication such as Security Questions, you will be asked for ID Verification through the third party biometrics service provider Au10tix. As apart of their privacy policy, Aut10tix may retain client data indefinitely, and at a minimum of 3 years even upon request.<ref>{{Cite web |date=2025-10-13 |title=Au10tix - Biometric Data Policy |url=https://www.au10tix.com/legal/biometric-data-policy/ |url-status=live |access-date=2025-10-13 |website=Au10tix |archive-url=http://web.archive.org/web/20251127091042/https://www.au10tix.com/legal/biometric-data-policy/ |archive-date=27 Nov 2025}}</ref> You can state that you do not consent to third party biometric collection and they will be able to direct you to a manual verification process whereby you can email your ID.
 ==References==
 <references />
 [[Category:Interactive Brokers]]