Does Interactive Brokers support passkeys?

Yes. IBKR says "Passkey is a phishing-resistant two-factor authentication method for your IBKR account" (IBKR: Secure Login System, checked Oct 22, 2026). At IBKR a passkey is your second factor, used with your username and password. IBKR also says "Passkey support is being rolled out gradually," and that if the option isn't available to you yet, "your account will be enabled as part of a later rollout" (IBKR: Authentication Using Passkey, checked Oct 22, 2026).

Does Interactive Brokers support YubiKey?

Yes. IBKR says you can store passkeys "on dedicated physical security keys (FIDO2-certified, like YubiKey, Google Titan, Token2, etc.)" (IBKR: Activating a Passkey, checked Oct 22, 2026).

What is the Interactive Brokers security device?

IBKR's current physical device is the Digital Security Card+, for accounts with a balance over 1,000,000 USD. IBKR says "this card adds an extra layer of security through the use of a PIN number, a challenge code and a high count of possible code permutations." It marks the older Security Code Card and Platinum devices as "a legacy device no longer being issued and in the process of being replaced" (IBKR: Secure Login System, checked Oct 22, 2026). IBKR says "In most instances, our Client Services team will directly contact you regarding your eligibility for a Digital Security Card+" (IBKR: Digital Security Card+, checked Oct 22, 2026).

Does Interactive Brokers support Google Authenticator?

Yes, for eligible users. IBKR says "IBKR allows eligible users to use an Authenticator app of their choice. Eligibility is based on regional criteria as a function of SMS delivery success rates," and names Google Authenticator among the apps that work (IBKR: Mobile Authenticator, checked Oct 22, 2026). IBKR's own IBKR Mobile app (IB Key) is another option.

Does Interactive Brokers have a money transfer lock?

Not documented. We did not find a transfer lock in IBKR's public guides or security pages. Its Client Portal user settings guide lists these security settings: password, online features, IP restrictions, Secure Login System and security questions (IBKR: User Settings, checked Oct 22, 2026). Not yet confirmed by the firm.

Does Interactive Brokers have a fraud guarantee?

Not documented. We did not find a written guarantee that IBKR will reimburse losses from unauthorized activity. An IBKR Campus glossary entry says that if you choose not to take part in the Secure Login System, "you must understand and acknowledge that IBKR will not compensate you or credit your account in the event that it is compromised by hackers or identity thieves." The entry is undated and describes an older passcode card (IBKR Campus: Secure Login System, checked Oct 22, 2026).

Interactive Brokers account security: passkeys, security keys, security devices, transfer lock and guarantee

Checked Oct 22, 2026

Quick answers

Does Interactive Brokers support passkeys? Yes. IBKR says "Passkey is a phishing-resistant two-factor authentication method for your IBKR account" (IBKR: Secure Login System, checked Oct 22, 2026). At IBKR a passkey is your second factor, used with your username and password. IBKR also says "Passkey support is being rolled out gradually," and that if the option isn't available to you yet, "your account will be enabled as part of a later rollout" (IBKR: Authentication Using Passkey, checked Oct 22, 2026).
Does Interactive Brokers support YubiKey? Yes. IBKR says you can store passkeys "on dedicated physical security keys (FIDO2-certified, like YubiKey, Google Titan, Token2, etc.)" (IBKR: Activating a Passkey, checked Oct 22, 2026).
What is the Interactive Brokers security device? IBKR's current physical device is the Digital Security Card+, for accounts with a balance over 1,000,000 USD. IBKR says "this card adds an extra layer of security through the use of a PIN number, a challenge code and a high count of possible code permutations." It marks the older Security Code Card and Platinum devices as "a legacy device no longer being issued and in the process of being replaced" (IBKR: Secure Login System, checked Oct 22, 2026). IBKR says "In most instances, our Client Services team will directly contact you regarding your eligibility for a Digital Security Card+" (IBKR: Digital Security Card+, checked Oct 22, 2026).
Does Interactive Brokers support Google Authenticator? Yes, for eligible users. IBKR says "IBKR allows eligible users to use an Authenticator app of their choice. Eligibility is based on regional criteria as a function of SMS delivery success rates," and names Google Authenticator among the apps that work (IBKR: Mobile Authenticator, checked Oct 22, 2026). IBKR's own IBKR Mobile app (IB Key) is another option.
Does Interactive Brokers have a money transfer lock? Not documented. We did not find a transfer lock in IBKR's public guides or security pages. Its Client Portal user settings guide lists these security settings: password, online features, IP restrictions, Secure Login System and security questions (IBKR: User Settings, checked Oct 22, 2026). Not yet confirmed by the firm.
Does Interactive Brokers have a fraud guarantee? Not documented. We did not find a written guarantee that IBKR will reimburse losses from unauthorized activity. An IBKR Campus glossary entry says that if you choose not to take part in the Secure Login System, "you must understand and acknowledge that IBKR will not compensate you or credit your account in the event that it is compromised by hackers or identity thieves." The entry is undated and describes an older passcode card (IBKR Campus: Secure Login System, checked Oct 22, 2026).

All eight protections we track

Protection	Status	What Interactive Brokers' docs say	Source
Passkeys	Offered	A WebAuthn/FIDO2 second factor, being rolled out gradually. Withdrawal limits for passkey users are 1M USD a day and 1M USD over 5 business days, the same as for authenticator apps.	Secure Login System; Authentication Using Passkey
Authenticator app or app approval	Offered	You can use IB Key in the IBKR Mobile app, and eligible users can use an authenticator app of their choice, such as Google Authenticator or Microsoft Authenticator.	Secure Login System; Mobile Authenticator
Hardware security key	Offered	IBKR says passkey authentication can use "a physical security key," and its passkey guide names FIDO2 keys such as YubiKey, Google Titan and Token2. The Digital Security Card+ shows codes, so we list it in the next row.	Secure Login System; Activating a Passkey
Code-generating key fob	Offered	The Digital Security Card+, for accounts with a balance over 1,000,000 USD. Older devices are no longer issued.	Secure Login System
Text message the only option?	Not offered	IBKR says "The mobile two-factor authentication is temporary and will be removed once you activate one of the digital or physical security devices listed below."	Secure Login System
Transfer lock	Not documented	We did not find a transfer lock in IBKR's public guides or security pages. Not yet confirmed by the firm.	User Settings
Phone PIN or verbal password	Not documented	We did not find a phone PIN or verbal password. IBKR's settings include security questions, which we don't count here.	Settings Quick Reference
Written fraud guarantee	Not documented	We did not find one. See the quick answer for IBKR's opt-out wording.	IBKR Campus glossary

How to turn it on

We list a step only where IBKR's own page gives it (checked Oct 22, 2026).

Passkey, from IBKR: Activating a Passkey. IBKR says "during your login, IBKR may prompt you to complete a passkey activation task," or you can register one yourself in Client Portal:
1. Log into Client Portal.
2. Click on the User ("Head and Shoulders" icon in the top right corner), then Settings, Security and Secure Login System (SLS). The 2FA registration widget appears on the right side.
3. Select the "Passkey" tab.
4. Give your passkey a descriptive name in the "Name your device" section and click on "Register."
5. For a physical security key, select "Security Key," insert your key into your device's USB port (or hold it near your device for NFC-enabled keys) and enter your PIN when asked. Touch the button or sensor on your security key, then wait for the "Registration Successful" confirmation message.
6. For a phone, select "iPhone, iPad or Android Device," point your phone's camera at the QR code on your computer screen (with Bluetooth on), tap "Register/Create Passkey" and verify with Face ID, Touch ID, fingerprint or your device PIN.
IBKR says "You can activate up to 3 Passkeys for the same user." If you don't see the Passkey option, IBKR says your account will be enabled in a later rollout.
Google Authenticator, from IBKR: Activating a Mobile Authenticator App:
1. Log in to Portal. A prompt to complete the Account Protection with Secure Login System task may appear. If it doesn't, click on the User icon, then Settings, Security and Secure Login System, where the QR code widget appears.
2. In Google Authenticator, tap the "+" icon and select "Scan a QR Code."
3. Frame the QR code shown in your IBKR Portal.
4. Enter the current code in the "Mobile Authenticator App Code" field and tap Activate.
IBKR says only eligible users can use an authenticator app, so the option may not appear for every account.
IB Key in the IBKR Mobile app: IBKR says "To get started, use your device to download the app" (IBKR: IB Key Authentication). IBKR keeps the setup steps on separate iPhone and Android pages.
Digital Security Card+, from IBKR: Digital Security Card+. IBKR says "You must be enrolled in our Secure Login System to request a DSC+." Then:
1. Log into your account.
2. Click User, then Settings and Secure Login System.
3. Click Request Physical Device.
4. Review and confirm your address, then review your request and click Continue to confirm.
Transfer lock: we did not find an official IBKR page for one, so we can't list steps. Not yet confirmed by the firm.
We could not see the steps inside Client Portal, which is behind IBKR's login, or confirm whether passkeys and authenticator apps are already enabled for any given US account (checked Oct 22, 2026).

What the statuses mean

Offered: Interactive Brokers' own documentation describes the feature.
Not offered: Interactive Brokers' documentation says it isn't available, or lists its options in a way that clearly leaves it out. For "Text message the only option?", Not offered means Interactive Brokers documents at least one alternative to text messages.
Not documented: we could not find the feature in Interactive Brokers' public materials. It may still exist.

Features change, so check with Interactive Brokers before relying on any detail. This page is general education, not financial advice.

Think we got it wrong? Tell us.

Sources

IBKR: Secure Login System, checked Oct 22, 2026
IBKR: Authentication Using Passkey, checked Oct 22, 2026
IBKR: Activating a Passkey, checked Oct 22, 2026
IBKR: Digital Security Card+, checked Oct 22, 2026
IBKR: Mobile Authenticator, checked Oct 22, 2026
IBKR: User Settings, checked Oct 22, 2026
IBKR Campus: Secure Login System, checked Oct 22, 2026
Settings Quick Reference, checked Oct 22, 2026
IBKR: Activating a Mobile Authenticator App, checked Oct 22, 2026
IBKR: IB Key Authentication, checked Oct 22, 2026

More: Cyber hub · How we score account protections