Vanguard account security: passkeys, security keys, transfer lock and guarantee
Checked
Quick answers
- Does Vanguard support passkeys? Yes. Vanguard says you can create a passkey to log in "the same way you unlock your device," using biometrics or a device PIN (Vanguard: Security Center, checked Oct 22, 2026).
- Does Vanguard support YubiKey? Vanguard doesn't name YubiKey or any brand. Its Security Center says "To use a security key, register your key in your profile & account settings on the security tab," and its passkey FAQ says "You can also use a physical USB key if you prefer" (Vanguard: Security Center, checked Oct 22, 2026).
- Does Vanguard support Google Authenticator? Not documented for third-party apps. Vanguard documents approving logins in its own app, but not codes from third-party authenticator apps such as Google Authenticator (Vanguard: Security Center, checked Oct 22, 2026).
- Does Vanguard have a money transfer lock? Yes. Vanguard's outgoing transfer lock will "prevent your assets from being moved to an outside brokerage institution without your consent." Vanguard says "An outgoing transfer lock prevents ACAT, or Automated Customer Account Transfer," the system brokerages use to move assets between firms. It doesn't apply to bank transfers you initiate (Vanguard: Security Center, checked Oct 22, 2026).
- What is Vanguard's security guarantee? Vanguard says that "if money is taken from your covered account through unauthorized activity, Vanguard will reimburse every dollar taken." The promise applies to "most accounts held directly with Vanguard and eligible retirement participant accounts," and excludes 529 savings plan accounts and annuities. It depends on you protecting your login details, reviewing your account, contacting Vanguard as soon as possible if you suspect fraud, and cooperating with any review or investigation (Vanguard: Security Center, checked Oct 22, 2026).
All eight protections we track
| Protection | Status | What Vanguard's docs say | Source |
|---|---|---|---|
| Passkeys | Offered | You can create a passkey and log in with your device's facial or fingerprint recognition or PIN. | Security Center |
| Authenticator app or app approval | Offered | You can verify a login in the Vanguard app with biometrics, by scanning a QR code or selecting "verify with the app." We did not find support for third-party authenticator apps. | Security Center |
| Hardware security key | Offered | You can register a security key on the security tab of your profile and account settings, and you can use a physical USB key for a passkey. | Security Center |
| Code-generating key fob | Not documented | We did not find a physical token that shows a code. | Security Center |
| Text message the only option? | Not offered | Vanguard offers biometrics, passkeys and security keys. Security codes by text or phone call remain "a required form of multi-factor authentication at Vanguard." | Security Center |
| Transfer lock | Offered | The outgoing transfer lock prevents assets from being moved to an outside brokerage without your consent. | Security Center |
| Phone PIN or verbal password | Offered | Vanguard's Restore Account Access form refers to an "enhanced phone security password" you can place on your account. Vanguard Voice ID, which checks your voice, is separate. We don't count voiceprints here. | Restore Account Access form (PDF) |
| Written fraud guarantee | Offered | Vanguard will reimburse money taken from a covered account through unauthorized activity, if you meet its conditions. | Security Center |
How to turn it on
These steps come from Vanguard: Security Center (checked Oct 22, 2026). We list a step only where Vanguard's own page gives it.
- Passkey: register your device in your security profile. The next time you log in, choose your passkey instead of your username and password. Your device will then ask for its facial or fingerprint recognition or PIN. Vanguard says "You can create up to 5 passkeys."
- App approval: download the Vanguard app. Make sure biometrics are set up on your device, then in the app select profile, choose login & security under settings, and turn on the toggle for your device's biometrics. When you're prompted at login on vanguard.com, either scan the QR code, or select "verify with the app" after entering your username and password, then verify with biometrics in the app and select "yes, it's me."
- Security key: register your key on the security tab of your profile and account settings. Once it's registered, you'll be asked for your key at login. Vanguard's registration pages for passkeys and security keys are behind its login, so we could not confirm the current enrollment steps (checked Oct 22, 2026).
- Outgoing transfer lock: the Security Center links to the lock with a "Lock accounts" button, but it does not list the steps.
- Enhanced phone security password: Vanguard's form mentions removing this password, but we did not find public steps for setting one up. Ask Vanguard.
What the statuses mean
- Offered: Vanguard's own documentation describes the feature.
- Not offered: Vanguard's documentation says it isn't available, or lists its options in a way that clearly leaves it out. For "Text message the only option?", Not offered means Vanguard documents at least one alternative to text messages.
- Not documented: we could not find the feature in Vanguard's public materials. It may still exist.
Features change, so check with Vanguard before relying on any detail. This page is general education, not financial advice.
Think we got it wrong? Tell us.
Sources
- Vanguard: Security Center, checked Oct 22, 2026
- Restore Account Access form (PDF), checked Oct 22, 2026