Two-factor authentication (2FA) security

You can set up the two-factor authentication security measure on your account(s) when you’re logged in to our award-winning trading platform* via desktop, mobile app or tablet, by following the processes below.

See inside our platform

Get tight spreads, no hidden fees and access to 12,000 instruments.

Includes free demo account

Quick link to content:

How to set up 2FA on the platform

Follow the below steps to set up two-factor authentication on the platform via desktop:

Log into your account (or register for an account).
Access the ‘Settings’ dropdown menu in the navigation bar at the top of the window.
Select 'Two-factor authentication'.
On-screen instructions will guide you through the setup process for mobile app activation – via scanning a barcode or manual entry – or text message (SMS) activation.
Once you’ve selected either mobile app or text message for your 2FA method for withdrawals, you’ll instantly be protected for withdrawals. You can also choose to enable 2FA when logging in to your account for additional security, by selecting the ‘Enable 2FA for login?’ box.
To amend or switch off the 2FA security measure settings, simply update the details in the same section.

How to set up 2FA on mobile/tablet devices

The process for activating 2FA on the iOS and Android apps is very similar to the platform. The screenshots below are from an iPhone, but Android and tablet devices follow very similar paths. Learn more about our mobile trading app.

From the home screen, access the ‘More’ menu and select ‘Settings’.
In the security section, tap 'Two-factor authentication' and then choose either 'Mobile app'* or 'Text message (SMS)'.
Tap the toggle (to blue) to activate and reveal options.
Once you’ve selected either mobile app or text message for your 2FA method, you’ll instantly be protected for withdrawals. To enable 2FA for when you log in to your account for additional security, toggle (to blue) to activate under ‘Login’ > ‘Enable 2FA for login?’.

*For the app, we provide instructions to configure the Google authenticator app either manually or by scanning a barcode, but you can use any other RFC 6238-compliant one-time password (OTP) generating app.

Note that using the barcode method is only possible with a second device, since you can’t scan the barcode on the device it’s displayed on. The second device will be the one you will subsequently need to use to generate OTPs.

Using only one device, you can simply enter your phone number to receive OTPs by SMS.

* #1 Web Platform, ForexBrokers.com Awards, 2023; #1 Most Currency Pairs, ForexBrokers.com Awards, 2023; Best Charting (Germany), Investment Trends Leverage Trading Report, 2023; Best Customer Service (Germany), Investment Trends Leverage Trading Report, 2023; Best In-House Analysts, Professional Trader Awards, 2022; No.1 Platform Technology (UK), ForexBrokers.com Awards, 2022; Best CFD Provider (UK), Online Money Awards, 2022; Industry Pioneer with "Outstanding" Customer Rating (Germany), Focus Money Test Edition 36/2022, 2022; "Very good" Trading Platform (Germany), Deutsches Kundeninstitut (DKI) Survey, 2022; Best Mobile Trading Platform (UK), ADVFN International Financial Awards, 2022; Best Spread Betting Provider (UK), City of London Wealth Management Awards, 2021.
** 1.621 million unique user logins for the CMC Markets invest, CFD and spread betting platforms globally, as at August 2024.

Disclaimer: CMC Markets is an execution-only service provider. The material (whether or not it states any opinions) is for general information purposes only, and does not take into account your personal circumstances or objectives. Nothing in this material is (or should be considered to be) financial, investment or other advice on which reliance should be placed. No opinion given in the material constitutes a recommendation by CMC Markets or the author that any particular investment, security, transaction or investment strategy is suitable for any specific person. The material has not been prepared in accordance with legal requirements designed to promote the independence of investment research. Although we are not specifically prevented from dealing before providing this material, we do not seek to take advantage of the material prior to its dissemination.