Merrill account security: two-factor authentication, passkeys, security keys and guarantee
Checked
Quick answers
- Does Merrill Edge have two-factor authentication? Yes. Merrill's Security Center says "You can choose to enter a one-time code every time you log in or with unrecognized devices." It also documents passkeys and USB security keys (Merrill: Security Center, checked Oct 22, 2026). Merrill says its FIDO2 USB security keys "are an optional alternative to one-time security codes at log in" (Merrill: USB security key, checked Oct 22, 2026).
- Does Merrill support YubiKey? Merrill doesn't name YubiKey or any brand. It says "You can use a FIDO2 certified USB security key when logging into your online account," and that these keys "can be purchased at many online and trusted tech retailers" (Merrill: USB security key, checked Oct 22, 2026).
- Does Merrill have passkeys? Yes. Merrill says "you can add up to 5 passkeys on your verified device, such as a phone, tablet or computer" (Merrill: Security Center, checked Oct 22, 2026).
- Does Merrill have a money transfer lock? Not documented. We did not find a lock you can turn on yourself for transfers out of your account on Merrill's public security pages (Merrill: Security Center, checked Oct 22, 2026).
- What is the Merrill Fraud Protection Guarantee? Merrill says "We will reimburse you for quantifiable monetary losses that occur in any of your Merrill accounts due to unauthorized, third-party activity." To qualify, you must contact Merrill "as soon as possible, but not later than 60 days from the suspected unauthorized activity," safeguard "your account access information, including Login ID, passwords and all other access codes," and "cooperate with us in any investigation." The guarantee "does not cover any tax consequences, legal fees and expenses, or lost opportunity, special, consequential, punitive, or non-monetary damages," and Merrill may not reimburse you if you are reimbursed, or eligible for reimbursement, from another source such as your insurance company. Merrill also says "We may ask you to sign an affidavit, assign certain rights to Merrill and/or sign a release form as a condition of reimbursement" and "Merrill will determine the type and amount of reimbursement you will receive under this guarantee" (Merrill: Fraud Protection Guarantee, checked Oct 22, 2026).
All eight protections we track
| Protection | Status | What Merrill's docs say | Source |
|---|---|---|---|
| Passkeys | Offered | You can add up to 5 passkeys on your verified device, such as a phone, tablet or computer. | Security Center |
| Authenticator app or app approval | Not documented | Merrill documents one-time codes, passkeys and USB security keys. We did not find an authenticator app or app-based login approval. | Security Center |
| Hardware security key | Offered | You can use a FIDO2 certified USB security key when logging in. Merrill says "You also have the option to add up to two FIDO2 certified USB security keys." | USB security key |
| Code-generating key fob | Not documented | We did not find a physical token that shows a code. Merrill's hardware option is a FIDO2 USB key. | Security Center |
| Text message the only option? | Not offered | Merrill says FIDO2 USB security keys "are an optional alternative to one-time security codes at log in," and it also offers passkeys. | USB security key |
| Transfer lock | Not documented | We did not find a self-service lock on outgoing transfers. | Security Center |
| Phone PIN or verbal password | Offered | "We offer all clients the opportunity to create a security code to securely access account information over the phone." | How Merrill protects your personal information |
| Written fraud guarantee | Offered | Merrill will reimburse quantifiable monetary losses in Merrill accounts due to unauthorized, third-party activity, if you meet its conditions. | Fraud Protection Guarantee |
How to turn it on
We list a step only where Merrill's own page gives it (checked Oct 22, 2026).
- USB security key, from Merrill: USB security key:
- Get a FIDO2 certified USB security key. Merrill says to "search for 'USB security key' and make sure the key you choose is FIDO2 certified."
- Log into your account and click the "Enhanced Security" tab in the Security Center.
- When you're asked for your key at login, tap the button on the key already inserted into your USB port, allow the browser to read your device, and continue logging in.
Merrill says you need a supported browser "such as Chrome, Edge, Safari, or Firefox," and that "Internet Explorer does not support USB security keys at this time."
- One-time code: Merrill says "Once you enable this service online via the Security Center, we'll send you a one-time code at each login based on your receipt preference" (Merrill: how Merrill protects your personal information).
- Passkey: Merrill's public pages don't give setup steps.
- The Security Center's "Manage passkeys" and "Manage USB security keys" links go to Merrill's login page, so we could not confirm the enrollment steps past login (checked Oct 22, 2026).
- Phone security code: Merrill says it offers one to all clients, but we did not find public setup steps. Ask Merrill when you call.
What the statuses mean
- Offered: Merrill's own documentation describes the feature.
- Not offered: Merrill's documentation says it isn't available, or lists its options in a way that clearly leaves it out. For "Text message the only option?", Not offered means Merrill documents at least one alternative to text messages.
- Not documented: we could not find the feature in Merrill's public materials. It may still exist.
Features change, so check with Merrill before relying on any detail. This page is general education, not financial advice.
Think we got it wrong? Tell us.
Sources
- Merrill: Security Center, checked Oct 22, 2026
- Merrill: USB security key, checked Oct 22, 2026
- Merrill: Fraud Protection Guarantee, checked Oct 22, 2026
- Merrill: how Merrill protects your personal information, checked Oct 22, 2026