How to Secure Your Trading Account: 2FA, Investor Passwords, Phishing and Shared VPS Risks
Two-factor login, master vs investor passwords in MT4/MT5, phishing and EA or VPS risks: practical security steps for forex and gold traders.
I wrote this guide based on how I actually trade gold. No theory — just what works after 10 years.
Key takeaways
- Your broker's client portal (where you deposit and withdraw) is more important than the trading platform: it controls...
- MetaTrader accounts have two passwords:
- Your email can reset your broker password. Secure your email with 2FA and a password you use nowhere else.
- Emails or messages that say your account will be suspended unless you log in through a link.
- Run Expert Advisors only from sources you trust; an EA can place any trade.
- Review your account history weekly. Unknown trades, withdrawal requests or changed bank details mean: change password...
- Can someone withdraw with my MT5 password? Withdrawals are made from the client portal, not MT5. But someone with you...
A trading account is a direct line to money. Securing it takes half an hour and protects against the most common ways accounts are compromised.
1. Turn on two-factor authentication on the client portal
Your broker's client portal (where you deposit and withdraw) is more important than the trading platform: it controls withdrawals. Enable 2FA with an authenticator app rather than SMS where possible.
2. Understand MT4/MT5 passwords
MetaTrader accounts have two passwords:
| Password | Can do |
|---|---|
| Master (trading) password | Open, close and modify trades |
| Investor password | View only; no trading |
Only ever share the investor password, for example with a mentor or a tracking service. Anyone with your master password can trade your account.
In MT5 you can change both: File → Change password (or Tools → Options → Server, depending on version).
3. Use a unique password for the portal and email
Your email can reset your broker password. Secure your email with 2FA and a password you use nowhere else.
4. Spot phishing
- Emails or messages that say your account will be suspended unless you log in through a link.
- Login pages on slightly different domains.
- Calls from "your account manager" asking for codes or remote access to your computer.
Always log in by typing the broker's address yourself or using a bookmark. Your broker will never need your 2FA code. See also scam red flags.
5. Be careful with EAs, VPS and copy services
- Run Expert Advisors only from sources you trust; an EA can place any trade.
- A VPS is a remote computer; protect its login like your bank account.
- Copy-trading and signal services should need only an investor password or an official broker integration, never your client-portal login.
6. Check activity regularly
Review your account history weekly. Unknown trades, withdrawal requests or changed bank details mean: change passwords, contact the broker and freeze withdrawals.
Questions traders ask
Can someone withdraw with my MT5 password? Withdrawals are made from the client portal, not MT5. But someone with your master password can trade away your balance.
Is it safe to log in on public Wi-Fi? Use a trusted connection or a VPN for logins, and never on shared computers.
What should I do if my account was accessed? Change all passwords, enable 2FA, contact the broker immediately and ask them to restrict withdrawals until resolved.
I don't predict. I prepare. Every trade I share here is placed with real money, in real time. No indicators, no noise — just price action and experience.
— Happy trading, Lin
Recommended Brokers
Recommended: Visit EBC → — tested across all sessions.
Start Trading Gold →LIN'S GOLD LETTER
One email a week on what moved gold
Every Sunday: the week in gold, the data to watch next week, and the notes worth rereading. No signals for sale, no spam.
Unsubscribe with one click from any email. We never share your address.
Related Guides
Read the Full Story
How I Set Up My Gold Trading Charts: A Step-by-Step Guide
Clean charts, one indicator, and a repeatable process. Here's exactly how I set up my MT4 for gold trading — Daily chart, 4-hour chart, Fibonacci setup, and position sizing formula.
Jul 19, 2026
Gold Trading Tools I Actually Use: My Complete Setup After 10 Years
After 10 years in the market, here's the complete trading setup I use every day — hardware, software, notebook system, and the execution rules that keep me disciplined.
Jul 14, 2026
Gold Position Sizing on MT4: How to Calculate Lot Size for XAUUSD
I once saw a trader lose $8,000 on a single gold trade because he did not understand lot sizes. Here is my exact formula for calculating position size on XAUUSD — and why small is beautiful.
Jul 10, 2026
On this page
More from Lin's Desk
Hand-picked by Lin — from my trading desk to yours.
Demo vs Live Trading: What Changes When the Money Is Real (and How to Make the Switch)
I put this together after years of refining my own method. No fluff, just what works.
3 min readHow to Read an Economic Calendar as a Gold Trader: Impact, Consensus, Previous and Actual
This covers the strategy I use during US session trading. Tested across hundreds of sessions.
3 min readHow to Set TradingView Alerts for Gold Levels, So You Can Stop Watching the Chart
I put this together after years of refining my own method. No fluff, just what works.
3 min readHow to Check Swap Rates for Gold in MT4 and MT5, and Turn Them Into Dollars
I put this together after years of refining my own method. No fluff, just what works.
3 min read