Security

| |

How We Protect Your Account

Authentication: each account is associated with a unique UserName and password combination required to be entered when accessing secure applications such as the Trader Workstation and Account Management. We enforce strict rules for creating passwords, including a minimum character length and the use of both alphabetical and numeric characters to prevent others from readily deciphering your information. For added security, IB supports two-factor authentication through our Secure Transaction Program. Participants in the Program receive a personal security device which provides a randomly generated Security Code that is used in conjunction with the User Name and Password to access secure areas. The Security Code provided by the device changes upon each login attempt, making attacks by hackers and snoopers virtually impossible. Click here for additional details on the STP Program.
Communicating via the Internet: IB incorporates Secure Socket Layer (SSL) technology into the Trader Workstation and our Website to establish a secure transmission connection and ensure the confidentiality and integrity of information passed to and from your computer. We deploy SSL using the strongest level of encryption, 128-bit, which prevents eavesdropping or tampering of information relating to your trades, banking instructions, statements or communications.

To enable SSL with the Trader Workstation, check the “Use SSL” box on the login screen. Note that checking this box may cause you to experience minor performance impacts depending on the capabilities of your PC. When visiting our Website and prior to logging into Account Management, look for https:// instead of http:// before the www.interactivebrokers.com Web address. The extra "s" stands for secure. Some browsers display a lock or key icon along the bottom, also indicating a secure SSL connection.
IP Restrictions: to provide an added layer of security, IB allows you to restrict user access to the Trader Workstation from only a specific list of IP addresses. Where multiple traders have been designated for an account, the restrictions can be set at an individual trader level.
Failed Login Attempts: to protect your account from unauthorized individuals, IB will restrict account access following a set number of failed login attempts.
Automatic Logoff: to limit the timeframe by which your private information may remain untended, our Account Management and Web Trader applications will automatically log you off after a period of inactivity.
Statements: All statements are posted to our Account Management area which is accessed through an SSL application as described above. While we offer email statements to its customers as a convenience, we do not encourage this alternative as we cannot attest to the security of commercial email systems.
Monitoring: We employ state-of-the-art transaction monitoring systems and maintain a dedicated Security Team responsible for detecting suspicious activity. If an unusual or suspicious transaction is noted, a member of this team may contact you to confirm the validity of the transaction. If contacted, you will never be asked to provide your password and we encourage that you call back and request to speak to the Security Team employee via our toll free number (1–877-442-2757) in order to first confirm their identity.

Customer Responsibilities

IB goes to great lengths to keep our customer’s accounts secure, but the customer must also practice “safe computing” to prevent breaches. Your cooperation in observing the guidelines below is an important component of our security efforts.

Password Creation & Administration: minimize the likelihood of unauthorized individuals obtaining your password through the following steps:
- Create a strong password using the maximum characters available and avoiding simple or duplicate alphabetic and numeric sequences or passwords containing personal information;Don’t share your password with anyone;
- Change your password frequently and don’t use the same password for multiple systems;
- Don’t use notes on your monitor, keyboard or desk to help you remember your passwords;
- Do not enable any application features that would automatically log you in or pre-fill the User Name or password fields;
Employ Safe Practices: Follow the practices below to minimize the likelihood of your account being compromised:
- Lock your computer if you’re leaving it for a period of time by setting up a password protected screensaver. Also turn off your computer when you have finished using it.
- Avoid accessing your account from public computers which may have targeted by hackers and keystroke capture software. If you must use a public computer, make sure you log out after accessing your account and do not leave the computer unattended while logged in. It’s also a good practice to clear the browser cache after logoff so that no sensitive information remains stored on the computer.
- Don’t share files if you don’t need to. It is a smart idea to disable Windows file and printer sharing features and if you decide to use these, make sure that you configure the access permissions with strong passwords, and only share for specific users.
- We recommend that you turn on your pop-up blocker, setting the filter the highest possible level, and either add the IB Web site to your list of "trusted" sites, or disable your pop-up blocker while you're on this site.
- Regularly check for security updates and patches for your operating system and use the most current version of your browser.
- Use email safely, deleting messages which don’t originate from a trusted source as they may contain harmful attachments or may be an attempt to fraudulently obtain sensitive information. Turn off the "preview pane" in your email system as this function can allow some viruses to be executed even if you never open the email.
Install Security Software: Use Security tools
- You should install both a hardware and software Internet firewall on your computer to control the flow of traffic to your computer. This is especially important if you are operating with a broadband connection and therefore maintaining continuous Internet access. Use antivirus software to identify and eliminate viruses you may have downloaded to your computer accidentally. As new viruses are constantly being created, you need to update your antivirus software regularly.
- Use Anti-spyware software to detect and remove spyware programs which can collect various types of personal information, monitor your browsing activity and interfere with the control of your computer.
Maintain Accurate Information: in the event we detect unusual or suspicious activity relating to your account, communication with you is essential. Accordingly, you should always ensure that the contact information you’ve provided (e.g., telephone numbers, email address) remains accurate. To update any of your personal information, please log into Account Management and select the User Management and then User Information menu options.
Monitor Your Account: Regularly check your account balance and positions through the Trader Workstation and the daily statements available through Account Management. Report anything suspicious to us immediately toll free in the US at (877) 442-2757 or direct at (312) 542-6901.
Cooperate: in the event your account is ever compromised, we recommend that you cooperate fully with our security team to investigate the source of any fraudulent activity, take the steps necessary to further protect the account and work to restore full account access.

Know the Threats

Phishing: a fraudulent activity in which one attempts to obtain sensitive information by masquerading as a trustworthy institution. These attempts are typically carried out by an email containing a link to what appears to be an authentic website. These counterfeit sites prompt you to enter your personal information, which the thieves can then use to access your accounts. Note that IB will never send an email requesting sensitive information such as your password. If you receive a suspicious email request which identifies IB, do not respond and notify our Security Team by calling toll-free in the US at (877) 442-2757 or direct at (312) 542-6901.
Spyware: refers to software typically downloaded from the Internet that covertly gathers information from your computer and without your knowledge. Once installed, the spyware monitors user activity on the Internet and transmits that information (including User Names and passwords) in the background to someone else. You should install anti-spyware software on your computer to detect and remove spyware.
Viruses, Worms & Trojan Horses: all malicious programs that can cause damage to your hardware, software or files and in some cases open your system to unauthorized access and possibly allow confidential information to be compromised. These programs, which largely differ by how they spread and replicate, are best controlled by first ensuring that your operating system is up-to-date and then installing anti-virus software on your computer, making sure that you frequently download updates to obtain the latest fixes.
For further readings about securing your home computer and protecting your privacy see:

CERT® Coordination Center
Home Network Security:
http://www.cert.org/tech_tips/home_networks.html

Security Focus - Securing Privacy, Part One: Hardware Issues:
http://www.securityfocus.com/infocus/1568

Security Focus - Securing Privacy, Part Two: Software Issues:
http://www.securityfocus.com/infocus/1573

Security Focus - Securing Privacy Part Three: Email Issues:
http://www.securityfocus.com/infocus/1579

Security Focus - Securing Privacy Part Four: Internet Issues:
http://www.securityfocus.com/infocus/1585

Secure Login System

Overview

To provide you with the highest level of online security possible, Interactive Brokers has implemented a Secure Login System under which access to your account is subject to two-factor authentication. Two-factor authentication is a security process which confirms your identity using two security factors – something you know (your User Name and Password combination) and something you have (an IB issued security device which generates a single-use Security Code). As knowledge of your User Name/Password and physical possession of the security device is required in order to login to your account, participation in the Secure Login System virtually eliminates the possibility of anyone other than you accessing your account.

IB provides a range of security devices, each tailored to meet the portability and security needs of your particular account. IB is enrolling groups of customers in phases, during which you will receive one of three different types of devices:

Security Code Card
Alpine Device
Gold/Platinum Devices

Subscription

If you haven’t already received a device you will need to log into Account Management and select the Secure Login System link in the User Management menu. A subscription page will appear providing an overview of the Secure Login System and device assigned to your account, along with a link to confirm your subscription.

Delivery

The delivery schedule depends on the security device you are being sent. Security Code Cards[1] are shipped several times a week via regular mail. Alpine Devices[2] are shipped several times a week via express mail. Platinum/Gold[3] security devices are shipped every day via express mail if your request has been completed prior to 13:00 ET on a US business day. Depending on your location and the capabilities of the shipper, a delivery tracking number will be made available after 18:00 ET on the shipping date. You can view this tracking number by clicking the Activate IB Security Device link available in the User Management menu in Account Management after that time or by calling technical assistance at 1-877-442-2757, Options 2, then 6.

Activation

After you receive the security device, log into Account Management and select either Activate IB Security Device[4] or Security Code Card Activation[5] from the User Management menu. What you see depends on the type of device you received. From there, follow the instructions to supply information you received upon subscription or from the device itself.

Once your device has been activated, each login attempt to either of Account Management or Trader Workstation will require the two authentication factors – your user name and password combination and the Security Code generated by your device. When you successfully login, your account will be secured with full perimeter coverage, protecting both cash and positions from unauthorized access. Additional information regarding the Secure Login System may be found in the FAQ section.

Account Type STP Qualification Specifics
Individuals	All individuals will receive a secure device. There are three variations of the device which will be explained to customers during the subscription process.
Advisors	All Advisor and their sub accounts will receive a secure device.
Institutions	Master and Sub accounts will receive a device tailored to their access permissions.
Brokers	Brokers that wish to participate in the Secure Login System will receive devices. Masters will receive the most secure device, while their customers will receive white labeled devices.

IB Security Devices

Click one of the following links to learn how to use your IB security device:

Accounts without any additional security are limited in the amount of money that can be withdrawn or transferred in one day, and in any five day period. Client's using the more sophisticated Alpine Devices are able to withdraw larger amounts. Our top level Gold and Platinum systems are available to clients with substantial balances providing state-of-the-art protection and allowing unlimited funds withdrawals.

To reduce the need for multiple devices we introduced the ability to share a security device between multiple usernames registered to the same individual.

We strongly suggest that clients with balances above 500,000 USD subscribe to our Gold or Platinum systems, while clients with balances between 50,000 and 500,000 USD may find that our Alpine Device provides the appropriate combination of convenience and security.

Withdrawal Limits for IB Customers

STP Device	Maximum Withdrawal per Day	Maximum Withdrawal in 5 Business Days
None	50K USD	100K USD
Security Code Card	200K USD	600K USD
Alpine Device	500K USD	1.5M USD
Gold	Unlimited	Unlimited
Platinum	Unlimited	Unlimited

Notes:

[1] Security Code Card: This resembles a credit card with 224 alpha-numeric codes.
[2] Alpine Device: This is a small blue oval device with an LCD and keychain clip.
[3] Gold/Platinum: This is a black rectangular device which has a numeric keypad and an LCD and resembles a small calculator.
[4] The Activate IB Security Device link will be displayed in the User Management menu in Account Management if you were sent an Alpine or Gold/Platinum device.
[5] The Security Code Card Activation link will be displayed in the User Management menu in Account Management if you were sent a Security Code Card.

Interactive Brokers Group Privacy Statement

The Interactive Brokers Group does not sell or license information about Interactive Brokers customers to third parties, nor do we sell customer lists or customer e-mail addresses to third-party marketers.

At IB, we understand that the confidentiality and security of the personal information that you have shared with us is important to you. That's why we have developed specific policies and practices that are designed to protect the privacy of your personal information. By opening an account with IB or by utilizing the products and services that are available through IB, you have consented to the collection and use of your personal information in accordance with the privacy policy set forth below. We encourage you to read this privacy statement carefully.

In order to provide brokerage services and in compliance with regulatory requirements, IB collects certain personal, non-public information from you. This includes information that you provide during the IB account application process (e.g., your name, e-mail address, telephone number, birth date, social security number, investment objectives, etc.), and acquired as a result of the transactions you conduct through the IB system. We safeguard the confidentiality of your information in a number of ways. For example:

We do not sell or license lists of our customers or the personal, non-public information that you provide to us.
We restrict access to the personal, non-public information that you have shared with us to those IB employees, agents, and affiliates who need to know such information in connection with the services that IB provides to you.
We maintain strict employment policies that prohibit employees who have access to your personal, non-public information from using or disclosing such information except for business purposes.
We take substantial precautions to safeguard your personal, nonpublic information. For example, the IB system can be accessed only by authorized IB personnel via valid user names and passwords. In addition, our Internet-based systems include security measures such as encryption and firewalls.
IB uses the personal, nonpublic information that we collect from you to service your account (e.g., to qualify you for trading the products and using the services available through the IB system and to execute and confirm your IB transactions). In doing so, we may share such information with our employees, agents, and affiliates.

IB also collects and uses information acquired from "cookies." "Cookies" are bits of textual information that are sent electronically from a web server to your browser and are stored on your computer. They do not identify you individually nor do they contain personal information about you, unless you have identified yourself or provided the information by, for example, opening an account or registering for an on-line service. IB may use cookies to measure and identify website traffic patterns and to track the performance of web features and advertisements. By providing IB with a better understanding of how you and others use IB's websites and other web services, cookies enable IB to improve the navigation and functionality of its websites and to present the most useful information and offers to you. IB may share information obtained from cookies with its employees, agents and affiliates, but does not sell such information to unaffiliated third parties. IB may permit other companies or their third party ad servers to set cookies on your browser when you visit an IB website. Such companies generally use these cookies as we do.

We do not disclose personal, nonpublic information to individuals or entities that are not affiliated with IB, except as provided by law. For example, among other reasons we may disclose or report such information: where necessary to authorize, effect, administer, or enforce transactions that you request or authorize; to maintain and administer your account; to provide you with account confirmations, statements and records; to maintain appropriate archival records; where we believe that disclosure is required by applicable law, rules or regulations; to cooperate with law enforcement or regulatory or self-regulatory organizations; to enforce our customer and other agreements; to meet our obligations, or to protect our rights and property.

Finally, if you choose to subscribe to any of the Trader's Toolbox suite of third-party services that are provided through the IB website, we may disclose such information to the service providers as necessary for them to provide the services that you have requested. IB requires these service providers to enter into confidentiality agreements with IB that limit their use of the information that they receive. Such agreements prohibit the service provider from using IB customer information that they receive other than to carry out the purposes for which the information was disclosed. If you have any questions about these policies, please contact IB Customer Service through the IB website at the Customer Service Contact Page.

Secure Login System FAQs

Please note that the information below is subject to change and should be referred back to for the most up-to-date information.

Can I start the enrollment process prior to IB sending me an invitation?
Does it cost anything to participate in the Secure Login System?
Is participation in the Secure Login System mandatory?
I successfully confirmed my enrollment invitation but have not yet received a security device. What should I do?
Is it safe to send the security device by mail?
Once I’ve received my security device, when am I required to activate it?
How do I operate my security device?
I’ve typed in the correct Security Code but cannot log in.
Will my security device work when traveling?
What if I need to log in and don’t have the security device within my possession?
Can multiple IB accounts be managed by a single security device?
How do turn my security device off?
Does the security device require any special care?
How do I return the security device if I close my account?
If I lose my security device and someone finds it are they able to access my account?
What is the best way to contact IB with questions regarding the Secure Login System?

Can I start the enrollment process prior to IB sending me an invitation?
If your account equity exceeds $100,000 (or US equivalent) and you haven’t already received an invitation, you may subscribe by logging into Account Management and selecting the Secure Login System menu item. Other customers may request an invitation by sending an IB Inquiry Ticket through Account Management or contacting the Secure Login System Department at 1- 877- 442-2757, option 6.

Prior to submitting a request we recommend that you verify that the email address listed for your account in Account Management is accurate and that your Internet Service Provider has not routed an email invitation into your spam folder.