Wells Fargo (WellsTrade) account security: passkeys, security tokens, transfer lock and guarantee
Checked
WellsTrade accounts use the Wells Fargo Online sign-on. Wells Fargo's WellsTrade FAQ says "You can access your account by logging into the Wells Fargo Mobile® app," and, if you don't have access, to enroll in Wells Fargo Online (Wells Fargo Advisors: WellsTrade FAQ, checked Oct 22, 2026). The sign-on protections below come from Wells Fargo's own help pages.
Quick answers
- Does Wells Fargo have passkeys? Yes. Wells Fargo says "A passkey is a way to sign on to your Wells Fargo account without a password," and that you can still "sign on with your username and password at any time" (Wells Fargo: passkey questions, checked Oct 22, 2026).
- Does Wells Fargo have two-factor authentication? Yes. Wells Fargo calls it two-step verification. It says "We encourage you to turn on Wells Fargo's two-step verification feature to help protect your account," and "Once enabled, you'll be prompted to enter a passcode as a part of the login process." You can get the passcode by asking Wells Fargo to send it "via push notification, text message, email, or phone call," or from an RSA SecurID device (Wells Fargo: two-step verification, checked Oct 22, 2026).
- Does Wells Fargo support YubiKey? Not documented. Wells Fargo doesn't name YubiKey or any brand, and its passkey questions page describes passkeys stored "in your device's cloud-based password manager," not on a security key (Wells Fargo: passkey questions, checked Oct 22, 2026).
- Does Wells Fargo support Google Authenticator? Not documented. Wells Fargo's two-step verification page lists passcodes sent by push notification, text message, email or phone call, or from an RSA SecurID device. We did not find support for third-party authenticator apps such as Google Authenticator (Wells Fargo: two-step verification, checked Oct 22, 2026).
- What is a Wells Fargo RSA SecurID device? It is a keychain device that shows a passcode for signing on. Wells Fargo says "An RSA SecurID device is a small, portable, electronic device that can be attached easily to a keychain. Every 60 seconds the device generates and displays a unique, random numeric passcode" (Wells Fargo: Advanced Access questions, checked Oct 22, 2026).
- Does Wells Fargo have a money transfer lock for WellsTrade? Not documented. We did not find a self-service lock on transfers out of a WellsTrade account on Wells Fargo's public pages (Wells Fargo: Voice Verification, checked Oct 22, 2026).
- Does Wells Fargo reimburse unauthorized transactions in a WellsTrade account? Not documented. We did not find a written fraud guarantee for WellsTrade accounts. Wells Fargo's Online Access Agreement sets liability limits for unauthorized transfers, but says those provisions "apply only to electronic fund transfers (EFTs) that debit or credit a Consumer's checking, savings, or other asset account and are subject to Regulation E" (Wells Fargo: Online Access Agreement, checked Oct 22, 2026).
All eight protections we track
| Protection | Status | What Wells Fargo's docs say | Source |
|---|---|---|---|
| Passkeys | Offered | You can sign on with a passkey instead of a password. Your username and password stay available. | Passkey questions |
| Authenticator app or app approval | Offered | Two-step verification codes can be sent "via push notification," and Wells Fargo's Advanced Access page says codes can arrive as "a push notification to your Wells Fargo Mobile® app." We did not find support for third-party authenticator apps. | Two-step verification; Advanced Access |
| Hardware security key | Not documented | We did not find FIDO or passkey security keys. The RSA SecurID device shows a code, so we list it in the next row. | Advanced Access questions |
| Code-generating key fob | Offered | The RSA SecurID keychain device shows a new passcode every 60 seconds. Wells Fargo's FAQ is inconsistent on cost: it says "You can request a new device for a one-time non-refundable charge of $25, which includes shipping and handling," then says "There are no costs or fees associated with the replacement of an RSA SecurID device." | Advanced Access questions |
| Text message the only option? | Not offered | Two-step verification codes can come by "push notification, text message, email, or phone call," or from an RSA SecurID device. Wells Fargo also offers passkeys. | Two-step verification; Passkey questions |
| Transfer lock | Not documented | We did not find a self-service lock on outgoing transfers. | Voice Verification |
| Phone PIN or verbal password | Not documented | We did not find a phone PIN or verbal password. Wells Fargo offers Voice Verification, which it calls "a biometric technology that allows you to use your unique voiceprint." We don't count voiceprints here. | Voice Verification |
| Written fraud guarantee | Not documented | We did not find a written fraud guarantee for WellsTrade accounts. The Online Access Agreement's liability limits apply to consumer electronic fund transfers covered by Regulation E. | Online Access Agreement |
How to turn it on
We list a step only where Wells Fargo's own page gives it (checked Oct 22, 2026).
- Passkey, from Wells Fargo: passkey questions: Before you start, Wells Fargo lists these requirements: "A mobile device that runs at least iOS 16 or Android 14, along with the latest version of the Wells Fargo app," or "A laptop or desktop computer that runs at least Windows 10, macOS Ventura, or ChromeOS 109," with "A browser that runs at least Firefox 122, Chrome 109, Edge 109, or Safari 16."
- Wells Fargo says "In the app, you'll find passkey setup in Security Center. On a computer, you'll find it under Security & Support."
Wells Fargo doesn't list the screens after that. It says not to use passkeys if you share your device or cloud account with someone.
- Two-step verification: Wells Fargo says "We encourage you to turn on Wells Fargo's two-step verification feature," and that "Once enabled, you'll be prompted to enter a passcode as a part of the login process" (Wells Fargo: two-step verification). The page doesn't give the menu path.
- RSA SecurID device: Wells Fargo says to "Log into online banking at WellsFargo.com to place your order" (Wells Fargo: Advanced Access questions). The ordering steps are behind login, so we could not confirm them (checked Oct 22, 2026).
What the statuses mean
- Offered: Wells Fargo's own documentation describes the feature.
- Not offered: Wells Fargo's documentation says it isn't available, or lists its options in a way that clearly leaves it out. For "Text message the only option?", Not offered means Wells Fargo documents at least one alternative to text messages.
- Not documented: we could not find the feature in Wells Fargo's public materials. It may still exist.
Features change, so check with Wells Fargo before relying on any detail. This page is general education, not financial advice.
Think we got it wrong? Tell us.
Sources
- Wells Fargo Advisors: WellsTrade FAQ, checked Oct 22, 2026
- Wells Fargo: passkey questions, checked Oct 22, 2026
- Wells Fargo: two-step verification, checked Oct 22, 2026
- Wells Fargo: Advanced Access questions, checked Oct 22, 2026
- Wells Fargo: Voice Verification, checked Oct 22, 2026
- Wells Fargo: Online Access Agreement, checked Oct 22, 2026
- Advanced Access, checked Oct 22, 2026