How to opt back into the Secure Login System

Übersicht: 

Clients who participate in the Secure Login System (SLS) program on a partial opt-out basis may expose themselves to risks and are therefore subject to certain restrictions (e.g. ability to trade Pink Sheet and OTCBB stocks).  Considering these factors along with the protection benefits afforded through a complete SLS protection, you may decide to fully opt back into the Secure Login System.  The following article provides the step-by-step instructions for accomplishing this.

Background: 

Please notice that in order to modify the security settings, your user needs to have the proper access rights. In case your user is not allowed to change the security settings, the system will show you a notice and will point you to the user which has such rights.

In order to opt back into the Secure Login System, please proceed as follows:

1. Open your browser and go to the web page www.ibkr.com.

2. Click on Login > Account Management
 
3. Enter your credentials and complete the authentication using your security device
 
4. From the left side menu, click on Settings > User Settings. Then, within the Security box, click the Configure "gear" icon next to Secure Login System1
 
5. You will see a box titled "Secure Login Settings". Within that box, click on the wheel(Configure) icon
 
6. Select the radio button next to "I want to always use my Secure Login Device when logging in" and click on Continue
 
7. You will receive a confirmation that your settings have been updated. Click on OK to finalize the procedure

 

Notes

1. If you are using the Classic version of the Account Management, click on the top menu Manage Account, then Security >Secure Login System > SLS Opt Out. There select the radio button to Opt Back In on the line correspondent to your user.

 

References
  • See KB1131 for an overview of the Secure Login System
  • See KB1943 for instructions on requesting a replacement Digital Security Card+
  • See KB2636 for information and procedures related to Security Devices
  • See KB2481 for instructions about sharing the Security Login Device between two or more users
  • See KB975 for instructions on how to return your security device to IB
  • See KB2260 for instructions on activating the IB Key authentication via IBKR Mobile
  • See KB2895 for information about Multiple 2Factor System (M2FS)
  • See KB1861 for information about charges or expenses associated with the security devices
  • See KB69 for information about Temporary passcode validity

 

How to share a security device

Übersicht: 

IBKR allows individuals to maintain multiple user names within a single account or across distinct accounts under their control.  Individuals who do not wish to maintain multiple physical security devices may elect to consolidate and share a single device across their users. The prerequisites and the procedure for sharing devices are outlined below.

Note: Clients using the IBKR Mobile Authentication (IB Key) should not use the present device sharing procedure, since the IB Key allows multiple users to be enabled directly from the IBKR Mobile app itself (menu item: Authenticate -> Add user). 
 
Background: 

Prerequisites

The possibility of sharing a physical security device will be granted only if ALL the conditions below are respected:

a) The participant users belong either to the same entity or to different entities but with the same identification data (Date of Birth, Citizenship, Country of Legal Residence, Identification Document type and number or Social Security Number for US Citizens and residents). 

b) The participant users do NOT have a temporary security device (Temporary Code, Online Security Code Card) currently assigned to them.

c) The physical device offering the highest level of protection has to be shared. In case all the devices offer the same level of protection, whichever of them can be eligible. You can check the security level of your device in the table below:

Security level

Device name

Device image

Highest Digital Security Card+ (DSC+)
Lowest Security Code Card (SLS card)
 
 

Procedure:

1. Among the possible candidates, identify the device offering the highest level of protection and the user that device belongs to. We will call that user the device owner

2. Log in to your Client Portal page with the requesting user (NOT the device owner)

3. Click on Menu icon in the top-left then select Settings and then User Settings
 
 4. Click on the wheel (Settings) close to Secure Login System
 
5a. In case your user does not have any active device, the system will display the SLS enrollment menu. Select the item "I already have access to a Secure Login Device under a different username" and click on Continue
 
5b. In any other case, the system will display the device list. Click on Share Device to proceed further
 
6. Enter the credentials of the device owner you identified at point 1. and click on Continue.

 
7. According to the SLS Device about to be shared, the system will display a security element (either Challenge Code or Index Numbers). Operate the SLS Device and, using the security element provided by the system, generate a response code. Enter the response code in the correspondent field and click on Continue.
 
8. Once you have reviewed the correctness of the information entered, click on Continue.

 
9. The system will display the status of your request (see note a. for details). Click OK to finalize the procedure.

 

NOTES:

a. In the vast majority of cases your sharing request will be automatically and immediately approved, processed and enforced. In case the approval of our Compliance department is needed, your request will stay in a pending status until this step has been cleared.

b. Once the device sharing request has been processed, you could keep the redundant device/s in a safe place. In the future you might decide to cancel the device sharing and reactivate those devices instead. If you do not feel the need to store them, you can send them (only DSC+) back to us following the instructions contained on this page:
 

c. Here below you can see the most common error messages and their causes:

- Less secure device: This error is returned if you set up the less secure token as the one to be shared. Please identify the most secure device and share that one.

- Different identification information:
This error is returned if the identification data of the entities/individuals involved in the sharing does not match. If the users belong to different entities/individuals, please notice that the token sharing will NOT be possible by design.
If the users belong in fact to the same entity/individual, the mismatch could be due, for example, to an outdated identification document on record. In this case, you can contact our Client services to have the data rectified.

 

 References:
  • Overview of the Secure Login System: KB1131 or ibkr.com/sls 
  • Multiple Two-Factor Authentication System (M2FS): KB2895
  • How to share the Security Login Device between two or more users: KB2481
  • How to opt back into the Secure Login System: KB2545
  • Security considerations following SLS partial opt-out: KB1198
  • Are there any charges or expenses associated with the security devices? KB1861
  • How to troubleshoot Account Management Login Failures: KB1132
  • How to troubleshoot Trading Platform Login Failures: KB1133

 

IBKR Mobile Authentication Overview - iOS

Übersicht: 

This page covers specific points of installing and using IBKR Mobile for Authentication purposes and usign the IB Key protocol on iOS devices.  For general questions on IBKR Mobile Authentication, please refer to KB2260.

 

Table of contents

 

Requirements

  • Must be installed on an iOS device with Touch ID (fingerprint reader) or Face ID (facial recognition).
  • Device's software version must be iOS 11.0 or later.
  • Device must have either Touch ID, Face ID or Passcode enabled. Touch ID or Face ID is the recommended choice. Refer to Set up Touch ID or Set up Face ID for directions.
 Back to top
 

Installation

You can download IBKR Mobile app on your iPhone directly from the App Store

Get the IB Key from the Apple Store

How to download IBKR Mobile from the App Store:

  1. On your iPhone tap on the App Store App Store icon icon.
  2. Click on the Search icon (magnifying glass) in the lower right corner, then click in the search bar at the top, type IBKR Mobile then click Search.
  3. Look for IBKR Mobile from Interactive Brokers LLC, tap on GET to the right, then tap INSTALL
    (if prompted, enter your Apple ID password or provide your fingerprint.)
  4. Once the installation has completed, tap on Open to launch the IBKR Mobile app.
        

 

Back to top

 

Activation

Once the app is installed on your device you will need to activate it for the username you would like to enroll. This operation happens entirely on your phone and requires Internet access.

  1. On your phone open the IBKR Mobile app. If you receive a message asking your consent for IBKR notifications, tap Allow.

     
  2. Select Register Two-Factor, review instructions then click Continue.
        
  3. Enter your Account Username and Password then tap Continue.
            
  4. The default mobile phone number on record for your account will be already selected. If you are not able to receive text messages (SMS) on that number, you should choose a different one from the list (if applicable) or add a new one. To add a new mobile phone number, tap Add Phone number, enter the new number1 and corresponding Country.  Once you have selected your preferred mobile number from the list or added the new mobile number, tap Get Activation SMS.
  5. An SMS message will be sent with an Activation Token. Enter the token in the Activation Code field. Then tap Activate.
           
  6. According to your phone hardware capabilities, you might be prompted to provide or define the security element used to secure the app (Fingerprint, Face ID or PIN2). Please provide the requested security element.
         
  7. If the activation has been successful, you will see a confirmation screen. Tap Done to finalize the procedure
     

Once the IBKR Mobile authentication has been activated, you can close the app. Refer to Operation with Touch ID or Operation with Face ID below on how to use IBKR Mobile for authentication.

Notes:

  1. You must enter your phone number without your country's trunk prefix and only enter numbers without any spacing or special characters.
  2. The recovery PIN will be used to enable additional users or re-enable IBKR Mobile if it has been uninstalled. It must be at least 4 and up to 6 characters (letters, numbers and special characters allowed). Refer to KB2269 for additional guidelines.

Back to top
 

Operation with Touch ID

Once activated, operation of IBKR Mobile Authentication using Touch ID is as follows:


IMPORTANT NOTE: If you do not have Internet access while operating IBKR Mobile Authentication, please refer to the section "What if I don't receive the notification?"


  1. Enter your username and password into the trading platform or Client Portal login screen and click Login. If correct, a notification will be sent to your iPhone.
    Two Factor Authentication Prompt
     
  2. On your iPhone, check your notifications panel and select the IBKR Mobile app notification.
     
     
  3. Selecting the notification will launch the IBKR Mobile app. On your iPhone, place your finger that was registered for Touch ID on the Home Button. If the Touch ID has not been activated, IB Key will prompt you to enter the Passcode.
         

  4. If authentication succeeds, the log in will now automatically proceed.
    Login proceeds after authentication 

Back to top
 

Operation with Face ID

Once activated, operation of IBKR Mobile Authentication using Face ID is as follows:
IMPORTANT NOTE: If you do not have Internet access while operating IBKR Mobile Authentication, please refer to the section "What if I don't receive the notification?"

  1. Enter your username and password into the trading platform or Client Portal login screen and click Login. If correct, a notification will be sent to your iPhone.
    Two Factor Authentication Prompt
     
  2. On your iPhone, check your notification menu and select the IBKR Mobile app notification.
     
     
  3. Selecting the notification will launch the IBKR Mobile app. On your iPhone, look at the screen to authenticate via Face ID. If Face ID has not been activated, IB Key will prompt you to enter the Passcode.
            

  4. If authentication succeeds, the log in will now automatically proceed.
    Login proceeds after authentication 

Back to top
 
 

What if I don't receive the notification?

If notifications are disabled, no internet access is available or if you have a poor, unstable connection it is possible the notification may not arrive. In these cases operation of IBKR Mobile Authentication is as follows: 

  1. Click the link Click here if you do not receive the notification.

     
  2. This will generate challenge code and box to enter response.    
  3. Launch IBKR Mobile on your Smartphone, then select Authenticate.  Type the Challenge number into the corresponding box.
        
  4. If you use Touch ID, place your finger that was registered on the Home Button. If the Touch ID has not been activated, IBKR Mobile will prompt you to enter the Passcode. A response string will be generated. If you use Face ID, skip this step and go to the next one.
        
  5. If you use Face ID, look into the If the Touch ID has not been activated, IBKR Mobile will prompt you to enter the Passcode. A response string will be generated.
        
  6. Enter the response from your iPhone into the log in screen and click OK
  7. If authentication succeeds, the log in will now automatically proceed.
    Login Proceeds

 

Back to top

 

References:
  • See KB2748 for instructions on how to recover IBKR Mobile Authentication.
  • See KB3234 for troubleshooting missing IBKR Mobile notifications
  • See KB2745 for instructions on how to clear the cache for the IBKR Mobile app.

 

IBKR Mobile Authentication Overview - Android

Übersicht: 

This page covers specific points of installing IBKR Mobile and using the IBKR Mobile Authentication for authentication purposes and using the IB Key protocol on Android devices.  For general questions on the IBKR Mobile Authentication, please refer to KB2260.

 

Table of contents

 

Requirements

  • Must be installed on an Android Phone that has not been rooted.
  • Device's Android Version must be 5.0 or later.

 

Installation

You can download the IBKR Mobile app on your smartphone directly from;
Google Play Store, 360 Mobile Assistant or Baidu Mobile Assistant.

Get the IB Key from the Google Play store          Download IB Key from 360 Mobile Assistance          Download IB Key from Baidu Mobile Assistant
 

How to install IBKR Mobile from the Google Play Store:

  1. On your Android phone tap on the Play Store Google Play Store App icon app.
  2. Tap on the search bar at the top, type IBKR Mobile then tap Search.
  3. Locate the app IBKR Mobile from Interactive Brokers Group, then select it.
  4. Tap on Install to the right.
  5. Once the installation completes, tap on Open to launch the IBKR Mobile app.

     Search for IB Key on Google Play Store   Install IB Key on Google Play Store

 

Back to top

 

Activation

Once the app has been installed on your device you will need to activate it for the username you would like to enroll. This operation happens entirely on your phone and requires Internet access.

1. On your phone open the IBKR Mobile app, tap Register Two-Factor, review instructions and then tap Continue.
 
 

2. Enter your IB Account Username and Password then tap Continue.

 

3. The default mobile phone number on record for your account will be already selected. If you are not able to receive text messages (SMS) on that number, you should choose a different one from the list (if applicable) or add a new one. To add a new mobile phone number, tap Add Phone Number, enter the new number1 and corresponding Country.  Once you have selected your preferred mobile number from the list or added the new mobile number, tap Get Activation Code


4. An SMS message will be sent with an Activation Token. Enter the token in the Activation Code field, create a PIN2 then select Activate.
   
 

5. You will receive a message with the outcome of the operation. Tap Done to finalize the procedure.
 

Once IB Key Authentication via IBKR Mobile has been activated, you can close the app. Refer to Operation instructions below on how to use the IBKR Mobile for authentication.

 

Notes: 

  1. You must enter your phone number without your country's trunk prefix and only enter numbers without any spacing or special characters.
  2. The PIN must be at least 4 and up to 6 characters (letters, numbers and special characters allowed). Refer to KB2269 for additional guidelines.
Back to top
 

Operation

Once activated, you can use the IBKR Mobile to authenticate your login attempt as follows:
IMPORTANT NOTE: If you do not have Internet access while operating the IBKR Mobile, please refer to the section "What if I do not receive the notification?"

  1. Enter your IB Account credentials into your trading platform or Client Portal login screen and click Login. If your credentials have been accepted, a notification will be sent to your phone.
    Two Factor Authentication Prompt
  2. On your phone, swipe down from the top and check your notification drawer. Tap on the IBKR Mobile notification. If you have not received the notification, please refer to KB3234.
    IB Key Push Notification prompt on Android Phone 
  3. The IBKR Mobile app will open, prompting you for your fingerprint or your PIN, according to the hardware capabilities of your phone. Please provide the requested security element.
     
     
  4. If the authentication has succeeded, the trading platform or Account Management login process will automatically move ahead to the next phases.
    IB Key authenticate successful, TWS continues to login
 
Back to top
 

What if I do not receive the notification?

If notifications are disabled, no internet access is available or if you have a poor, unstable connection, the notifications may not reach your phone. In these cases the seamless authentication may not be available but you can still use the manual Challenge/Response authentication method as described below: 

  1. On your trading platform or Account Management login screen, click the link "Click here if you do not receive the notification".
    Click here if you do not receive the notification
  2. Challenge code will be displayed on the screen.
    TWS Two Factor Challenge/Response
     
  3. Launch the IBKR Mobile app on your Smartphone, select Authenticate (if necessary), enter your PIN and the Challenge code you obtained in the previous step. Tap Generate Passcode.
     
     
  4. Response String will be displayed.

     
  5. Enter the Response String into your trading platform or Client Portal login screen. Then click OK.
    Manually enter response string and click OK
     
  6. If the authentication has succeeded, the trading platform or Client Portal login process will automatically move ahead to the next phases.
    IB Key authenticate successful, TWS continues to login

 

Back to top

 

References:
  • See KB2748 for instructions on how to recover IBKR Mobile Authentication.
  • See KB3234 for troubleshooting missing IBKR Mobile notifications
  • See KB2745 for instructions on how to clear the cache for the IBKR Mobile app.
 

 

Beantragung eines ersatzweisen Sicherheitsgeräts

Wenn Sie Ihr Sicherheitsgerät verloren haben, es Ihnen gestohlen wurde oder es nicht mehr funktionsfähig ist und Sie ein Ersatzgerät benötigen, sind die folgenden Schritte erforderlich:

1. Informieren Sie den Kundenservice - Sie müssen den Kundenservice kontaktieren, und die Bereitstellung eines Ersatzgeräts zu regeln und für die Zwischenzeit Zugang zu Ihrem Konto zu erhalten. Bitte nehmen Sie unbedingt zur Kenntnis, dass dieses Gerät nur per Telefon bereitgestellt werden kann und dass aus Sicherheitsgründen eine Identitätsprüfung des Kontoinhabers vorgenommen wird. Sobald Sie sich ausgewiesen haben, wird Ihnen ein temporärer Passwortcode mitgeteilt, der als statische Version des Codes fungiert, den Ihr dauerhaftes Sicherheitsgerät ansonsten zufällig generiert, und der folglich zusammen mit Ihrem Benutzernamen und Passwort bei der Anmeldung eingegeben werden muss.

2. Fordern Sie eine Online-Sicherheitscodekarte an - Der temporäre Passwortcode ist nur für einen begrenzten Zeitraum gültig (zwei Tage vollumfänglicher Zugang zu Kontoverwaltung und Handelsplattform und weitere zehn Tage eingeschränkter Zugang zur Kontoverwaltung). Dieses Zeitfenster soll Ihnen die Gelegenheit geben, auf die Kontoverwaltung zuzugreifen und den Umstieg auf eine Online-Sicherheitscodekarte zu beantragen. Diese Karte bietet ein höheres Maß an Schutz sowie vollumfänglichen Zugang zu den Kontoverwaltungsfunktionen (einschließlich Abhebungen/Auszahlungen). Außerdem können sie mit der Karte Ihr dauerhaftes Sicherheitsgerät reaktivieren, ohne dass Sie zusätzlich den Kundenservice kontaktieren müssen. In KB1873 erhalten Sie eine schrittweise Anleitung zur Anforderung einer Online-Sicherheitscodekarte.

3. Beantragen Sie ein Ersatzgerät - Wenn Sie die Online-Sicherheitscodekarte aktivieren, werden Ihnen die folgenden vier Auswahlmöglichkeiten angezeigt. Wählen Sie die Option „Ein neues Secure-Login-Gerät beantragen“ aus und klicken Sie auf „Weiter“.

Anschließend erhalten Sie Informationen dazu, welche Art von Ersatzgerät Sie erhalten werden, an welche Adresse dieses Gerät verschickt wird sowie Einzelheiten zum voraussichtlichen Versandzeitpunkt und der Versandmethode. Falls Ihr Ersatzgerät die Eingabe eines PIN-Codes zur Aktivierung erfordert (z. B. im Falle einer „Digital Security Card“ oder „Digital Security Card+“), erhalten Sie online Anleitungsschritte zur Erstellung des PIN-Codes und zur Fertigstellung Ihres Antrags. 

 

Wichtige Hinweise

- Als Sicherheitsvorkehrung ist für das Gerät eine automatische Aktivierung kurz nach dem voraussichtlichen Lieferdatum eingestellt. Die Online-Sicherheitscodekarte verfällt zwar erst nach dem Lieferdatum, aber wir empfehlen Ihnen dringend, Ihr Ersatzgerät bei Erhalt zu reaktivieren, um sicherzustellen, dass Sie ununterbrochen Zugang zu Ihrem Konto haben. Anleitungsschritte zur Reaktivierung erhalten Sie hier: KB1942.

- Wenn Sie Ihr Gerät verlieren oder es gestohlen oder beschädigt wird, oder wenn Sie Ihr Konto schließen und Ihr Gerät nicht an uns zurückschicken, wird Ihnen eine Gebühr in Rechnung gestellt, die dem Preis des Geräts entspricht. Diese Gebühr ist eine Funktion des bereitgestellten Geräts und beträgt zwischen 20,00 und 150,00 US-Dollar.

 

Wie kann ich das IB Sicherheitsgerät an Interactive Brokers LLC zurückschicken?

Background: 

Falls Sie Ihr Sicherheitsgerät an IB zurückschicken müssen (durch Beschädigung, Kontokonsolidierung oder Kontoschliessung), folgen Sie bitte den unten aufgelisteten Instruktionen:

 

Falls Sie Ihr Sicherheitsgerät an IB zurückschicken müssen (durch Beschädigung, Kontokonsolidierung oder Kontoschliessung), folgen Sie bitte den unten aufgelisteten Instruktionen:

  1. Laden und drucken Sie das Sicherheitslogingerät Rücksendeformular.
  2. Füllen Sie das Formular aus und packen Sie es zusammen mit dem Sicherheitsgerät ein.
  3. Schicken Sie das Paket an eine der unten aufgeführten Adressen.

Zu Ihrem Schutz empfehlen wir Ihnen einen gepolsterten Umschlag und einen Kurierservice mit Verfolgungsnummer (z.B. UPS, FedEx, DHL oder Deutsche Post Express Post) zu benutzen, da Sie für die Rücksendung verantwortlich sind im Falle eines Verlusts auf dem Weg zu unseren Büros. Bitte erlauben Sie die Dauer von 3 Tagen für den Erhalt und die Entfernung des Sicherheitsgeräts von Ihrem Konto. Bitte beachten Sie, dass die Lieferungszeit je nach Kurier Verspätung haben kann.

Zusätzliche Aktionen für Ersatzgeräte
Falls dies eine Ersatzgeräterücksendung und keine Kontoschliessungsrücksendung ist, rufen Sie bitte unsere technische Hilfsdienstabteilung unter 00800-42-276537 Option 2, 3 und die 2 an, um uns über Ihr defektes Gerät zu informieren und, damit wir Ihnen einen temporären Token zum weiteren Einloggen in die Kontoverwaltung und Trader Workstation aktivieren und zur Verfügung stellen können, bis das neue Ersatzgerät bei Ihnen eingetroffen ist. IB stellt mehrere verschiedene Gerätetypen zur Verfügung und die Ersatzprozederen dafür sind unten aufgeführt:
 

Für Platinum User:
Falls Sie Ihr Platinum Sicherheitslogingerät zurückschicken (Bild 1) und ein Ersatzgerät benötigen, müssen Sie in der Kontoverwaltung ein neues Gerät beantragen. Dies ist nötig wegen der erhöhten Sicherheitsfunktionen dieses Geräts. Sie können nur ein neues Gerät beantragen sobald IB den Erhalt des zurückgesendeten Geräts bestätigt hat, weil nur ein Sicherheitsgerät an einen User des Kontos gelinked werden kann. Nach der Anfrage stellen Sie bitte sicher, dass Sie die Bestätigungsseite der Anfrage, welche Ihre zur Aktivierung benötigten PIN Nummer und Ihren einzigartigen Passsatz enthält, ausdrucken.

Exhibit 1

 

Für Alpine User:
Falls Sie ein Alpine Sicherheitslogingerät zurückschicken (Bild 2), wird IB ein Ersatzgerät basierend auf der positiven Eingabe 'Ja' auf die Frage 'Benötigen Sie ein Ersatzgerät?' des SLS Rücksendefomulars reagieren. Es benötigt keine weiteren Aktionen auf unserer Webseite.

Exhibit 2

 

Für Digitale Sicherheitskarten (DSC) User:
Falls Sie eine Digitale Sicherheitskarte zurückschicken und ein Ersatzgerät benötigen, loggen Sie sich in die Kontoverwaltung ein und bestellen eine neue Karte. Dies ist nötig wegen der PIN Funktion dieser Karte. Bitte merken Sie sich Ihren PIN für den Aktivierunsprozess der Karte.

 

Für Sichereitsloginkarten User:
Dieser Kartentyp muss nicht zurückgeschickt werden und kann zerstört werden.

Postadresse für US & Kanadische Kunden: Postadresse für EU & Asiatische Kunden: Postadresse für  Australische Kunden:
Interactive Brokers, LLC.
Attn: Token Return Department
2 Pickwick Plaza
Greenwich, CT 06830
(203) 618-4006

Interactive Brokers (U.K.) LTD.
Attn: Token Return Department
Gotthardstrasse 3
CH-6301 Zug
Switzerland
+41-41-726-9500

Interactive Brokers, LLC.
Attn: Token Return Department
Grosvenor Place, Level 42
225 George Street
Sydney, 2000
+61 (2) 8093-7300

Kontoschliessung
Nach Schliessung des Kontos und Rücksendung des Sicherheitsgeräts können Sie sich weiterhin in die Kontoverwaltung einloggen um Kontoauszüge oder Steuerformulare anzuschauen und/oder zu drucken. Nach der Schliessung können Sie sich ohne das Sicherheitsgerät mithilfe von Usernamen und Passwort in die Kontoverwaltung einloggen.

 
Für weitere Fragen oder Unklarheiten wenden Sie sich bitte an unsere erfahrenen Sicherheitsspezialisten unter 00800-42-276537 Option 2, 3 und die 2, oder schicken Sie eine Email an tac@interactivebrokers.com
 
Für Informationen zur Ersatzgerätegebühr für verlorene, gestohlene, zerstörte oder nicht zurückgeschickte Sicherheitsgeräte schauen Sie sich KB1861 an.

 

Aktivierung einer Online Sicherheitscodekarte

Übersicht: 

Die Online Sicherheitscodekarte dient als temporäre Lösung für Kunden, die keinen Zugriff auf Ihr permanentes Sicherheitsgerät besitzen und einen temporären Token zum Einloggen beantragt haben.

Hintergrund:

Die Online Sicherheitscodekarte dient als temporäre Lösung für Kunden, die keinen Zugriff auf Ihr permanentes Sicherheitsgerät besitzen und einen temporären Token zum Einloggen beantragt haben. Nach Aktivierung des temporären Tokens empfiehlt IB den Kunden sich in die Kontoverwaltung einzuloggen und die Online Sicherheitscodekarte zu aktivieren, die folgende Vorteile mitbringt:

- Erhöhte Sicherheit vor Internethackern durch die Abfrage zufälliger Codes beim Login;

- Verlängert das Zeitfenster (21 Tage ggü. 2 für temporären Token) zum Erhalt und zur Reaktivierung des permanenten Sicherheitsgeräts, wodurch die Online Sicherheitscodekarte deaktiviert wird;

- Erlaubt Rücküberweisungen und Informationsänderungen ohne die Restriktionen, die durch die Aktivierung des temporären Tokens entstehen;

- Kann direkt in der Kontoverwaltung erstellt und aktiviert werden und erlaubt die Reaktivierung des permanenten Sicherheitsgeräts ohne Kontakt zum Kundendienst.

 

Die Schritte zur Aktivierung der Online Sicherheitscodekarte lauten wie folgt:

(Falls die Menüs der Kontoverwaltung oben angezeigt werden):

1. Wählen Sie Konto verwalten, Sicherheit und Sicherheitsloginsystem;

 

2. Wählen Sie 'Ja, ich möchte am Sicherheitsloginsystem teilnehmen' und auf 'Fortfahren'

 

3. Nun wird Ihnen ein Bild der Online Sicherheitscodekarte angezeigt. Bitte drücken Sie auf die 'Drucken' Option, die sich oberhalb der angezeigten Karte befindet (oder machen Sie einen Rechtsklick mit der Maus auf die Karte um dieses Bild auf Ihrem Desktop zu speichern).

 

4. Drücken Sie auf die 'Bestätigen' Option um die Kartenaktivierung zu initialisieren. Zwei Kartenindexwerte erscheinen auf dem Bildschirm.

 

5. Geben Sie den drei-stelligen alphanummerischen Code der Karte, die zur ersten Indexnummer auf der Karte angezeigt wird, in das 'Kartenwerte' Feld ein und wiederholen Sie diesen Vorgang mit der zweiten Indexnummer ohne ein Leerzeichen zwischen den Codes einzugeben.

 

6 Drücken Sie auf 'Übermitteln'

 

7. Nach Aktivierung der Karte wird Ihnen das Ablaufdatum zusammen mit Optionen für weiterführende Aufgaben angezeigt.

 

Schauen Sie KB1042 für Videoinstruktionen zum Login mit der Sicherheitscodekarte.

Schauen Sie KB1942 für Instruktionen zur Reaktivierung des permanenten Sicherheitslogingeräts

Schauen Sie KB1943 für Instruktionen zur Beantragung eines Ersatzsicherheitsgeräts

 

(Falls die Menüs der Kontoverwaltung links angezeigt werden)

1. Wählen Sie User Management und Secure Login System;

2. Wählen Sie 'Yes, I want to participate in the Secure Login System'

3. Nun wird Ihnen ein Bild der Online Sicherheitscodekarte angezeigt. Bitte drücken Sie auf die 'Print' Option, die sich rechts oberhalb der angezeigten Karte befindet (oder machen Sie einen Rechtsklick mit der Maus auf die Karte um dieses Bild auf Ihrem Desktop zu speichern).

4. Drücken Sie auf die 'Confirm' Option um die Kartenaktivierung zu initialisieren. Zwei Kartenindexwerte erscheinen auf dem Bildschirm.

5. Geben Sie den drei-stelligen alphanummerischen Code der Karte, die zur ersten Indexnummer auf der Karte angezeigt wird, in das 'Card values' Feld ein und wiederholen Sie diesen Vorgang mit der zweiten Indexnummer ohne ein Leerzeichen zwischen den Codes einzugeben.

6. Drücken Sir auf 'Submit'

7. Nach Aktivierung der Karte wird Ihnen das Ablaufdatum zusammen mit Optionen für weiterführende Aufgaben angezeigt.

How to request a Digital Security Card+ (DSC+) replacement

The following steps are required in order to replace a Digital Security Card+ which has been lost, stolen or became inoperable

1. Notify IB Client Services - Contact IB Client Services to obtain a temporary account access (Temporary Code). This service can only be provided via telephone and requires the identity of the account holder to be verified, as detailed in KB70

2. Obtain an Online Security Code Card - Activate an Online Security Code Card, which offers enhanced protection and full Account Management functionality for an extended period of 21 days. Please consult KB1873 should you need guidance for this specific step

3. Request the DSC+ replacement - Once you have completed the Online Security Code Card activation, please remain in the Secure Login System section of your Account Management and order your replacement DSC+ as follows

4. Click on the button Request Physical Device

5. The shipping address will be shown in the device information screen. If your address is outdated or invalid, you can amend it by clicking on Change Address and following the on-screen instructions. If you do not need to update your address, please proceed to step 6.

6. Enter a four-digit numeric  Soft PIN1 for your DSC+. Please make sure to remember the PIN you are typing since it will be necessary to activate and to operate your device. When applicable and desired, you may change the account on which the 20 USD deposit will be kept on hold2.  Click then on Continue

7. The system will show you a summary of your order. Please make sure of the correctness of all the information displayed. Should you need to perform changes, click on the button Back, otherwise submit the request by clicking on Continue

8. You will receive a final confirmation containing the estimated shipment date3. Click on Ok to finalize the procedure

 


Notes

1. For PIN guidelines, please consult KB2269

2. The Security token and the shipment are both free of charge. Nevertheless, when you order your device, we will freeze a small amount of your funds (20 USD).  If your device is lost, intentionally damaged, stolen or if you close your account without returning it to IB, we will use that amount as a compensation for the loss of the hardware. In any other case, the hold will be released once youre device has been returned to IB. More details on KB1861

3. For security reasons, the replacement device is set to auto-activate within three weeks from the shipment date. IB will notify you when the auto-activation is approaching and when it is imminent.

 

References
  • See KB1131 for an overview of the Secure Login System
  • See KB2636 for information and procedures related to Security Devices
  • See KB2481 for instructions about sharing the Security Login Device between two or more users
  • See KB2545 for instructions on how to opt back in to the Secure Login System
  • See KB975 for instructions on how to return your security device to IB
  • See KB2260 for instructions on activating the IB Key authentication via IBKR Mobile
  • See KB2895 for information about Multiple 2Factor System (M2FS)
  • See KB1861 for information about charges or expenses associated with the security devices
  • See KB69 for information about Temporary passcode validity

 

Security considerations following SLS opt out

Übersicht: 

Account holders who have elected to opt out of IBKR's Secure Login System (SLS) effectively relinquish the protections afforded by Two-Factor Authentication. They are strongly encouraged to utilize alternative security measures, with one of those being the IP Restrictions. By selecting this setting through Client Portal, you're telling Interactive Brokers that you only want access to your trading platforms from a specified IP address. In addition, should you have multiple authorized traders for a given account, these restrictions can be set at the individual trader level by the master user of the account. 

 

Preliminary checklist:

Before setting up the IP Restrictions, you will need to:

  • Know your WAN IP Address. That is the IP address exposed on the external (Internet) side of your network and it is different from your local IP address (called as well LAN IP address). If you trade from a company office, you can ask your IT or Networking department for the WAN IP address of your computer. If you connect to the Internet through a private broadband/cable/satellite connection you can get this information from your ISP (Internet Service Provider).
  • Make sure that your IP address is static. This means your IP address will always remain the same, and will not change upon router/modem reboot or after a certain time period. The same entities which provided you with the WAN IP address, can as well clarify whether it is a static or dynamic one.
  • Be aware that IP Restrictions are not effective immediately. Our systems apply the filters during their daily overnight restart. It can take up to 24 hours until they are active, depending on the time you submit your IP Restrictions request. The same applies when you modify or remove existing IP Restrictions. Please be sure to consider this when you are planning your course of action.
  • The IP Restrictions will be applied to ALL Trading Platforms offered by IB. It will not affect Client Portal access, which will remain accessible from any IP address.

Note:

Please take note that the technical ability to misrepresent one's IP address exists, and full account protection is only ensured by using SLS Two-Factor Authentication (ibkr.com/sls).

If you have any questions on the topic, please feel free to contact IB's Technical Assistance Center.

How to set the IP Restrictions:

  1. Login to Client Portal and click the menu icon in the top-left corner.
  2. From the left side menu, click on Settings, then on User Settings. Then click on the wheel (configure) icon next to IP Restrictions.
  3. You will see a brief description of the effects of IP Restrictions. To set up a new IP Restriction, click on Add IP Restriction.
  4. Select the Trader from the drop-down list and enter the IP Address (in the format xxx.xxx.xxx.xxx) you want to allow for him. Then click on Continue.
  5. If you logged into Client Portal without using the Two-Factor Authentication, you will now receive an email1 containing a Confirmation Number. Enter it in the Confirmation Number field. Once done, click on Continue to submit the request. If you logged in to the Account Management using a security device, please proceed directly to point 5.
  6. If the operation completed successfully, you will see a confirmation screen. Click OK.
  7. The system will now list your active IP Address restrictions. Should you want to create an additional one, click again on Add IP Restriction, otherwise navigate away from this section

 

Opt-out and IP Restrictions for Penny Stocks traders:

Clients who have elected to perform an opt-out, thus using the Two-Factor Authentication only for the Client Portal, must activate the IP Restrictions in order to be able to activate Penny Stocks Trading Permissions.


Additional best practices for securing your computer and your network

  • When logging into the TWS, activate the checkbox “Use SSL” on the login screen. SSL (Secure Socket Layer) guarantees that all the information exchanged between your computer and our servers is protected using 128-bit encryption.
  • Use a firewall to prevent unauthorized access to the services exposed by your network or/and computer. During the firewall set-up, please make sure you authorize the host/ports listed in section DESKTOP TWS of KB2816.
  • Use antivirus software to identify and eliminate viruses which might have infected your computer.  As new viruses are constantly being created, you need to update the threats database of your antivirus software regularly.
  • Use anti-malware software to detect and remove spyware/malware programs which can collect various types of personal information, monitor your browsing activity and interfere with the control of your computer. Nowadays many antivirus solutions include a built-in anti-malware protection.
  • Refrain from using wireless connections (Wi-fi) which are public, unsecured or not operated by you. If the use of a unsecured network (e.g. public Wi-Fi hotspot) becomes necessary, do not log into any financial institution account you may have, including your IB account.

 

Notes:
1. If you have not received the email, please make sure it did not land in the Spam/Junk folder of your mailbox and possibly add the email addresses donotreply@interactivebrokers.com and help@interactivebrokers.com to the trusted senders list. You can then request a new email to be sent to you with the button Resend Confirmation Number.

 

Troubleshooting Account Management Login Failures

Click on the link below which best describes your situation:

  1. Receiving “Invalid user name password combination” message
  2. Receiving “Login Failed” message upon entering security device values
  3. I’ve forgotten my user name and/or password
  4. I’m temporarily without possession of my security device
  5. My security device has been lost or damaged
  6. I’ve been issued a temporary passcode which has expired
  7. I’ve been issued an online security card which has expired
  8. I’m awaiting delivery of my physical security device and can now no longer log into my account
  9. I am able to log into Account Management with my temporary passcode but not the trading platform
  10. I am in possession of my security device and wish to activate it
  11. Receiving “BAD CHARACTER” message after entering my user name

IMPORTANT NOTE: If you are unable to resolve your account access issue from the information above, please contact your local Customer Service Center.  Also note that for security purposes, all requests for login assistance must be initiated via telephone as it requires prior verification of the account holder's identity. A listing of Customer Service Centers, contact numbers and hours of operations may be found via the following website link: http://individuals.interactivebrokers.com/en/p.php?f=customerService&ib_...

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 
a. Make sure that the Caps Lock key is not on as user name is case sensitive and is required to be input in lower case format.
IMPORTANT SECURITY NOTICE: If an account experiences 10 consecutive failed Account Management login attempts within any 24-hour period, it will be locked out from login regardless of subsequent attempts using the correct user name and password combination. This lock out, intended as a security measure to prevent hackers from random attempts to guess the password, will remain in force until 24 hours have passed since the last unsuccessful log in attempt.
 
If you believe that your account has or is about to be been locked due to consecutive failed login attempts, you will need to contact to contact your regional Customer Service Center via telephone for assistance. Note that assistance for log in matters is only provided via telephone and after the identity of the account holder has been verified.
 
 
 
 
Normal 0 false false false MicrosoftInternetExplorer4

a. If operating with a temporary passcode, note that alpha characters are case sensitive and are required to be input in upper case format

b. If operating a security card or electronic device, note that there are no spaces between characters

 
 
 
 
a. For security purposes, all requests for assistance with a user name and/or password must be initiated via telephone and require prior verification of the account holder’s identity. Requests are to be directed to one of the regional Customer Service Centers. 
 
 
 
 
a. If you are temporarily without possession of your security device, interim access may be provided by contacting your regional Customer Service Center via telephone where, once your identity has been verified, you will be provided with a temporary passcode.
 
The temporary passcode is a static alpha-numeric code which replaces the randomly generated code provided through your security device and which will provide full access to Account Management and the trading platforms for 2 days. Should a lengthier period of interim access be necessary, and to obtain enhanced protection, it is recommended that you use the temporary passcode to log into Account Management and print out the on-line security card which will operate as a replacement to your security device for up to 3 weeks.  
 
After the expiration of the temporary passcode or on-line security card, or if you regain possession of your security device beforehand, you will need to log into Account Management and select the menu option to re-activate your security device.
 
 
 
 
 
a. In the case of a lost or damaged security device, you will need to contact our Customer Service center to arrange for a replacement and to provide for interim access. As the time frame for shipping a replacement device may range form 3 to 14 days depending upon your country of residence, interim access is provided via an on-line security card. The on-line security card may be retrieved for printing or saving as an image to your desktop once a temporary passcode has been provided for Account Management access.
 
 
 
 
 
a. The temporary passcode is intended to provide full access to both Account Management and the trading platforms for a period of 2 days. After 2 days, the temporary passcode may no longer be used to access the trading platforms but may be used to access Account Management for an additional period of 10 days. The Account Management access, however, is limited solely for the purpose of printing or saving the on-line security card.  
 
If your window of access to Account Management using the temporary passcode remains, you may print or save the on-line security card through which full access to both Account Management and the trading platforms is provided for a period of 21 days. If you are unable to log into Account Management, you will need to contact your regional Customer Service center for assistance.
 
 
 
 
 
a. The on-line security card is intended to provide full access to both Account Management and the trading platforms for a period of 21 days. This time frame, while limited, is intended to provide sufficient opportunity for the account holder to either regain possession of a temporarily unavailable security device or request and receive a replacement device.
 
If you are unable to log in using the on-line security card, you will need to contact your regional Customer Service center for assistance and to provide information as to the status of your permanent security device.
 
 
 
 
 
a. Depending upon your location, the physical security device should be delivered to the address of record on your account within 2 days in the case of US residents and within 2 weeks for all other accounts. It’s important to note that the permanent devices are set to automatically activate after a set timeframe if not yet manually activated by the account holder. If this is the case and you encounter difficulties logging into your account, please contact our Technical Assistance Department at 1-877-442-2757.
 
 
 
 
 
a. If your window of access to Account Management using the temporary passcode remains, you may print or save the on-line security card through which full access to both Account Management and the trading platforms is provided for a period of 21 days.
 
If you are unable to log into Account Management, you will need to contact your regional Customer Servicecenter for assistance.
 
 
 
 
 
a. To activate either a replacement device or one which was temporarily unavailable and which required issuance of a temporary passcode, you will need to log into Account Management and select the reactivate security device menu option. Once reactivated, neither the temporary passcode nor on-line security card will remain operable.

 

 

11. Receiving “BAD CHARACTER” message after entering my user name.

a. Re-enter your user name and make sure that you do not include any spaces or characters which are not either alpha or numeric (e.g. !@#$%^&*(.,”:...etc.).

...Top

Syndicate content