Two separate sets of credentials protect you, and they fail differently.
Your account with us
- Use a password that is not used anywhere else. Length matters more than character rules.
- Sign out on shared machines and do not let a browser save the password there.
- If a reset link is unexpected, do not follow it. Ask us to confirm through the contact form instead.
Your trading platform
- Keep your broker master password private, change it periodically, and never share it with a service, a group or a person offering to run something for you.
- Use the investor password for read-only sharing, and understand that it still exposes your activity to whoever holds it.
- A robot runs with the permissions of the terminal it is loaded in. It has no ability to move money out of your account, but it can place orders, so its risk limits deserve the same care as your password.
On our side
Passwords are stored only as one-way hashes, access to licence and payment records is authorised per request rather than per page, and administrative changes are logged. If you believe an account has been accessed without permission, tell us immediately so we can act on it.