Two-Step Verification Questions

Two-Step Verification Questions

Two-Step Verification Security

What is Two-Step Verification?

Two-Step Verification (also known as two-factor authentication or multifactor authentication) is a security feature that adds an extra layer of protection when accessing your TradeStation brokerage accounts.

Traditional user names and passwords can be guessed or discovered by malicious online perpetrators. However, since only you will have access to your VIP credential that generates a unique security code for validating your identity, your account is better protected and transactions are more secured. Security codes cannot be used more than once and old codes that have expired cannot be reused.Once this feature is enabled, you will be required to provide two factors or means of authentication when you log in to your TradeStation account:

  1. Your user name and password,
  2. A six-digit security code from your Symantec VIP credential or token.

What is Symantec VIP?

Two-Step Verification relies on the Symantec Validation & ID Protection (VIP) Service. Symantec VIP is an enterprise-grade security service from a globally recognized leader in online security, which provides the infrastructure, client software and other important elements critical to bringing Two-Step Verification to TradeStation customers.

How do I enable Two-Step Verification?

When you enable Two-Step Verification< with TradeStation, you will be required to register a Symantec VIP Access credential or token. You can choose between software or hardware credentials, and their purpose is to generate a unique security code that you will be required to provide when you log in to TradeStation’s web applications and sites.

  1. Log in to the TradeStation Client Center.
  2. Select Customer Profile from the main navigation menu.
  3. Under Security & Passwords in the left navigation, select Two-Step Verification.
  4. Click Get Started
  5. You will be directed to the default VIP Access Mobile Credential enrollment.To proceed with enrolling with VIP Access Mobile, follow the instructions and click Enable.To change the credential type, click the Change button above the instructions. Select your desired credential or token, follow the instructions and click Enable.

After enabling Two-Step Verification, you will be required to provide your user name and password along with a six-digit security code from your credential in order to log in to a TradeStation web application or site.

How do I disable Two-Step Verification?

When Two-Step Verification is disabled, all information regarding your credential and backup phone will be deleted for security purposes. You will need to re-register both should you enable this feature again.

  1. Log in to the TradeStation Client Center.
  2. Select Customer Profile from the main navigation menu.
  3. Under Security & Passwords in the left navigation, select Two-Step Verification.
  4. Click Disable.
  5. Select Disable in the confirmation prompt.

Once Two-Step Verification is disabled, you will be prompted to answer a security question next time you log in to a TradeStation web application or site.

How do I unregister a credential or token?

When you disable Two-Step Verification in the Client Center, your credential will be automatically unregistered. Once this is complete, you will not be able to use it when logging in to TradeStation. Instead, you will be prompted with a security question when you log in from an untrusted device or browser.

  1. Log in to the TradeStation Client Center.
  2. Select Customer Profile from the main navigation menu.
  3. Under Security & Passwords in the left navigation, select Two-Step Verification.
  4. Select Change in the Enrolled Credential area.
  5. Click Continue in the confirmation popup to disable Two-Step Verification and unregister your credential or token.

How can I switch to use another VIP Access credential?

  1. Log in to the TradeStation Client Center.
  2. Select Customer Profile from the main navigation menu.
  3. Under Security & Passwords in the left navigation, select Two-Step Verification.
  4. In the Enrolled Credential table, click on the Change link under the Action column.
  5. Select Continue to confirm the change.
  6. Once the feature is disabled, click on Enroll with a different credential? and follow the instructions to register the new VIP Access credential.

Can I log in without my VIP Access credential?

Yes, you can log in if you do not have access to your VIP Access credential through your backup phone registration or TradeStation Client Services.

If you have a backup phone registered:

  1. Log in to TradeStation Client Center with your user name and password.
  2. After entering your credentials, the logon screen will prompt you for the security code.
  3. At this point, select the I need help getting a security code link located in the help box at the right-hand side of the page.
  4. Click the button under Have a backup phone? to request that TradeStation send you a security code via SMS text message to your backup phone on file.
  5. Type the code you receive in the field provided on the logon screen.If you are logging in from a trusted device/browser, you may also choose to bypass Two-Step Verification in this device from now on by selecting Trust this computer? and clicking Login.

If you do not have a backup phone registered or need further assistance, contact TradeStation Client Services.

Can I use a Symantec VIP credential that I currently have?

If you already have a Symantec VIP credential that you are using to log in to another organization, you can register this credential with TradeStation by enabling Two-Step Verification in the TradeStation Client Center.

What should I do if my credential is lost or stolen?

  1. Log in to your TradeStation account by obtaining a security code from your backup phone or a temporary code from TradeStation Client Services.
  2. Unregister the lost or stolen credential by disabling Two-Step Verification for your account.
  3. Once Two Step Verification is disabled, you can either re-enable the feature by registering a new credential or keep it disabled, which will utilize security questions during the web logon process.

Please note that every time you install the free VIP Access mobile/desktop application on your device, the new application will display a different Credential ID that you can use to re-enable Two-Step Verification. If you prefer using a VIP Access Security card or token, you can order another from the Symantec VIP Center. Once you receive the new credential, you can enable Two-Step Verification and register the credential from the Client Center.

Which TradeStation applications and sites currently support Two-Step Verification?

The applications and websites that currently support Two-Step Verification include:

  • TradeStation.com
  • TradeStation Client Center
  • Account opening process
  • Community forums
  • Web trading

This list may change as we make this service incrementally available on all TradeStation services and software. Please refer back to this page to access the most recent information.

Back to top

Symantec VIP Credentials

Which credentials are supported by TradeStation?

Symantec VIP software credentials are available for most mobile devices and personal computers, in addition to stand-alone traditional key-fob and credit-card-style hardware tokens.

TradeStation currently supports the registration of only one Symantec VIP credential per user login, but you can select the one that best fits your needs from the following options:

 
VIP Access Mobile
FREE
 
VIP Access Desktop
FREE
 
VIP Security Card
Available for purchase
 
VIP Security Token
Available for purchase

What is VIP Access Mobile?

VIP Access Mobile is a free mobile application provided by Symantec, which once installed on your mobile device, will work as a VIP Access credential. This application displays a unique Credential ID and generates a different security code every 30 seconds. If the security code expires before you log in, use the next code generated by your VIP Access application.

For easy download to your mobile device, use the links provided below:

    

  

What mobile phones support VIP Access Mobile?

To see a current list of devices supported, go to Symantec VIP Mobile Center.

What do I do if I have VIP Access Mobile and get a new phone?

Each installation of VIP Access Mobile has a unique Credential ID. If you obtain a new mobile phone, you will need to disable Two-Step Verification to remove the previous VIP Access Mobile Credential ID. You will then re-enable Two-Step Verification and register the new phone as your current VIP Access Mobile to create a new Credential ID.

  1. Log in to the TradeStation Client Center.
  2. Select Customer Profile from the main navigation menu.
  3. Under Security & Passwords in the left navigation, select Two-Step Verification.
  4. Select Change in the Enrolled Credential area.
  5. Click Continue in the confirmation popup to disable Two-Step Verification to remove the previous VIP Access Mobile Credential ID.
  6. On the disable confirmation page, select Enroll with a new credential? to navigate to the Two-Step Verification enrollment page and follow the steps to enroll with your new phone.

What is VIP Access Desktop?

VIP Access Desktop is a free application download for Mac or Windows computers. Once installed, this desktop application will work as a VIP Access credential. When this application is launched, it will display a unique Credential ID and generate a different security code every 30 seconds. If your security code expires before you log in, use the next code generated by your VIP Access application.

Note: By selecting VIP Access Desktop as your VIP Access credential, your Credential ID and Security Code will only be accessible from the computer in which it is installed.

You can download the latest version of the application from Symantec VIP Center.

What is a VIP Security Card?

A VIP Security Card is a credential the size of a credit card that can fit in your wallet. To generate a security code with the card, press and release the button on the front. The code will be visible inside a small rectangular display on the card.

In order to enable Two-Step Verification with a VIP Security Card, order one from the Symantec VIP Center. Once you receive the VIP Security Card, visit the TradeStation Client Center and enable Two-Step Verification.

What is a VIP Security Token?

VIP Security Tokens are portable devices that can be attached to your key chain. The Credential ID is on the back of the device and a security code is generated by pressing the button on the front of the device.

In order to enable Two-Step Verification with a VIP Security Token, order one from the Symantec VIP Center. Once you receive the VIP Security Token, go to the TradeStation Client Center and enable Two-Step Verification.

Back to top

Backup Mobile Phone Support

What is the purpose of having a backup phone?

Backup mobile phones provide a quick solution (without having to contact Client Services) should you have problems logging in with your current VIP Access credential. The backup mobile phone can receive a security code via SMS text message in the event you cannot log in with your credential. Please note that text messaging rates may apply.

Note: If you select VIP Access Mobile as your credential, it is recommended that you use a different mobile phone number as your backup mobile phone.

How do I register a backup phone?

You can register or enroll a backup mobile phone when you enable Two-Step Verification for your login account, but you can also add or change your backup phone number at any time if you have enabled Two-Step Verification.

  1. Log in to the TradeStation Client Center.
  2. Select Customer Profile from the main navigation menu.
  3. Under Security & Passwords in the left navigation, select Two-Step Verification.
  4. Locate the Backup Mobile Phone section and click on Add.
  5. Select your country code, enter your phone number and click Enroll to prompt TradeStation to send an activation code via SMS text message.
  6. Once the activation code is received, type the code in the field provided and click Verify to validate and activate this device as your backup phone.

Note: If you select VIP Access Mobile as your credential, it is recommended that you use a different mobile phone number as your backup mobile phone.

Please note that text messaging rates may apply.

Can I change my backup phone?

If you have enabled Two-Step Verification and would like to update your backup phone information, have the new phone at hand before you start.

  1. Log in to the TradeStation Client Center.
  2. Select Customer Profile from the main navigation menu.
  3. Under Security & Passwords in the left navigation, select Two-Step Verification.
  4. Locate the Backup Mobile Phone section and click Change.
  5. Select your country code, enter your phone number and click Enroll to prompt TradeStation to send an activation code via SMS text message.
  6. Once the activation code is received, type the code in the box provided and click Verify to validate and activate this device as your backup phone.

Please note that text messaging rates may apply.

What do I do if I do not receive the activation code?

Text messages with activation codes may take from 5 to 30 seconds to be received by the backup phone. If you have not received a code after 30 seconds, verify that the country calling code and phone number entered are correct. If the information provided is correct, click on the Resend link and use the Enroll button to get a new activation code. For further assistance, please contact TradeStation Client Services.

Do activation codes expire?

Activation codes sent to your phone are active for 10 minutes. Once the code expires, you will need to select Resend and click the Enroll button to receive a new activation code.

Back to top