Multi Factor Authentication (MFA) and Trusted Devices

Trade Automation Toolbox now supports Multi Factor Authentication (MFA) when signing in to the website or the locally installed TAT application. TOTP (Time-based One-Time Password) based MFA (Multi-Factor Authentication) is a security method that adds an extra layer of protection to online accounts by requiring a unique, time-sensitive code generated by an authenticator app, in addition to a username and password. This code, a 6-digit number, changes every 30 seconds and is used as a second factor in the authentication process.

Enabling Multi Factor Authentication

Enabling MFA for your TAT account is highly recommended. To do so, sign in to TradeAutomationToolbox.com user site and click the Security link in the top right corner next to sign out.

One on the Security page, there are 3 steps to enabling MFA on your account.

1. With an app on your phone, like Google Authenticator or similar, scan the QR code or manually type in the code provided. (Google Authenticator can be installed for Android or Apple iOS.)

2. Once added to your app, enter the 6 digit numeric code that it is now providing.

3. Click the Setup Multi Factor button to verify the 6 digit code provided and enable MFA.

Using Multi Factor Authentication

Once MFA is enabled on your TAT account, you will be prompted to provide the rolling 6 digit MFA authentication code when accessing the TAT website or TAT application from a new device.

When signing in to the website, you will see a message and screen like this, allowing you to provide the code from the Authenticator app to complete the sign in. You can also set the checkbox to "Trust this device", which will bypass the code entry requirement for future sign ins from this browser.

In the Trade Automation Toolbox application, after providing your email and password to sign in, you will see the screen below to provide your MFA authentication code. After providing the code successfully, this computer/server will be added to your list of Trusted devices and you will not need to provide the MFA code again.

Disabling Multi Factor Authentication

It is possible to disable MFA on the Security page of the TAT user website. You will need to provide the current MFA code to disable.

NOTE: Disabling MFA will also remove any trusted devices on your account and disable all broker connections. You will need to re-authorize your brokerage account link with TradeStation or Schwab and re-save your Tradier API key to continue trading.

Trusted Devices

TAT now maintains a list of Trusted devices on the Security page on the TAT website. When you access TAT from any of the devices listed, you will not need to provide the MFA code again when signing in on that device. Devices are named using the machine name provided by Windows for TAT application sign ins. The trusted device named "web" covers all website sign ins. The list of trusted devices will show when that device was added, the last time it was seen, and the IP address it was most recently accessed from.

If you move servers or computers, you have the ability to remove that trusted device by clicking the yellow Remove button. One this device is removed, if you try to access TAT from that device again, you will be required to provide the MFA code again. To reset all MFA access to the TAT website, you can "Remove" the "web" device, which will require MFA code to provided again for all web signins.

NOTE: Removing the "web" trusted device will require the MFA code for any website signins. It will also disable all broker connections. You will need to re-authorize your brokerage account link with TradeStation or Schwab and re-save your Tradier API key to continue trading.

Password Resets

If you forget your password, or choose to reset it, all of your trusted devices and linked brokers are removed as well. This is a safety feature in case you believe your password was compromised. You will need to provide your MFA code again when signing in and you will need to re-authorize your brokerage account link with TradeStation or Schwab and re-save your Tradier API key to continue trading.