Security
We ask for the password that cannot trade.
Every MT5 and MT4 account has two passwords. One can trade. The other can only look. FxMind links with the one that only looks. If you also give your trading password, so FxMind can close trades for you, it is encrypted in transit and at rest with AES-256. Only our isolated bridge, the one service that talks to your broker, can read it.
Master passwordnot needed to start
••••••••••
The main password of an MT5 or MT4 account, the one you trade with. FxMind only asks for it if you want it to close or reduce trades for you.
Investor passwordview only, the one we use
••••••••••
A second password every MT5 and MT4 account has. It lets someone see the account but never open, change or close a trade.
01Where your data goes
How your account data moves, step by step.
Four steps. Your password stays at step two and is never sent on.
01
Your broker
the MT5 or MT4 server
02
FxMind bridge
separate service, keeps your password encrypted
03
Warnings and journal
fixed rules, no AI involved
04
You
web, phone, email
only if you allow it: close, reduce, move stop, cancel
open a trade FxMind has no command for it
02Two kinds of link
View only by default. Anything more needs your clear yes.
default
Read-only link
You paste the investor password. With it, MetaTrader itself blocks every trade request. So read-only is not just our promise. It is how your broker's server works. If you paste the master password here by mistake, FxMind refuses it and asks for the investor one.
- Sees balance, open trades, waiting orders and history
- Can warn you
- Cannot open, change or close anything. MetaTrader blocks it.
your choice, Pro and above
Guarded link
Only if you want FxMind to act for you. It needs the master password, a screen that lists in plain words what FxMind may do, and 2FA on your FxMind account. You set the rules for each account. One tap switches it all off.
- May close or reduce a trade, move a stop loss, cancel a waiting order
- Never opens a trade. The code has no command for it.
- Three modes: alert only, ask then act with 60 s to cancel, act at once
- Does not close if the spread (the gap between buy and sell price) is wider than your limit. It alerts you instead.
- Every action leaves a receipt: what, why, the broker's reply and how many ms it took
Measured on a demo account
- 113ms
- move stop
- 119ms
- close
- 111ms
- cancel order
03Your broker password
Stored once, encrypted, never shown again.
01
Encrypted when stored
With AES-256-GCM, a strong encryption standard. The key is kept out of the database and the code, and only the bridge service receives it.
02
Never shown, never written to logs
No screen, API or support tool returns a stored password. Not to you, not to our staff. To change it, you paste a new one.
03
One separate service
Only the bridge talks to broker servers. It runs on its own and keeps the password. The rest of FxMind only receives your trades and balance.
04
Deleted when you unlink
Unlink an account and its stored password is deleted. Deleting your FxMind account removes all of them.
04Your FxMind account
How we protect your FxMind login.
- Password storage
- Stored as an Argon2id hash, a one-way scramble. Nobody at FxMind can read your password.
- Weak password check
- New passwords must have at least 10 characters and must not be on public lists of unsafe passwords. The check never sends your password out of our server in readable form.
- Two-step sign-in
- A code from an authenticator app on your phone, plus 10 one-time backup codes. Needed before FxMind can act on trades, and for payout details and API keys.
- Sign-in keys
- Each sign-in key lasts 15 minutes, then renews with a fresh one. Used keys stop working. If one is tried again, we end that sign-in.
- Signed-in devices
- See every signed-in device with its location and last activity. Sign one out, or all, from Settings.
- Asked again for big changes
- Changing your email or password, unlinking an account, turning 2FA off or deleting the account asks for your phone code again.
- Lost phone
- Use a backup code. Without one, support checks that it is really you. Access comes back after 24 hours, with an email to you.
05Our servers
How our servers are set up.
- Front door
- Every request passes through Cloudflare first.
- Encrypted connections
- TLS on every connection, with HSTS on, so your browser always talks to FxMind encrypted.
- Internal services
- Our internal services cannot be reached from the internet. Only the front door can.
- Broker connections
- Without a dedicated IP, they leave from our server's own address, which other customers' accounts use too. A dedicated IP (included on Elite and Desk, an add-on on Trader and Pro) gives you one only you use.
- Keys and secrets
- Kept outside our code, readable only by the service that needs them.
- Action log
- Every action by a guard, an admin or support staff is logged with a reason.
06In short
What FxMind can and cannot do.
Can
- See your balance, trades, orders and history
- Warn you before news or a broken prop firm rule
- Write every trade into your journal
- Close or reduce a trade, move a stop or cancel an order. Only if you switched this on, and only within your rules
- Show you a receipt for every action it took
Cannot
- Open a trade. Ever. On any link.
- Take money out of your account. MetaTrader passwords cannot do that either.
- Act when you linked with the investor password
- Show your broker password to you, to staff or to anyone
- Tell you what to buy or sell
07Your data
It is your journal. Take it with you, or delete it.
Export
Download your trades, notes and tags from Settings.
Delete
Delete your account from Settings. Your journal, linked accounts and stored passwords go with it.
Not sold, not used for ads
We do not sell your data. Our AI runs on DeepSeek V4. We send it only what your question needs, never your broker password, 2FA codes or card numbers.
The analyst sees only what your question needs
When you ask the analyst a question, only the data needed to answer it goes to our AI provider. The warnings never use AI.
Read next
Help center · Getting started
Find your MT5 or MT4 investor password
The investor password is the view-only password of your MetaTrader account, MT5 or MT4. Your broker sent it when you opened the account. You can also set a new one in MetaTrader in about a minute.
Help center · Security
Set up two-step sign-in (2FA)
Turn on 2FA in Settings with an authenticator app: scan the QR code, type the code it shows, and save your 10 recovery codes. Some actions need it.
Features
Every feature, and the plan that has it.
Every FxMind feature, the plan it starts on and its limits in plain numbers: a live MT4 and MT5 link, news at every trade, prop rules watched live, an analyst that cites its facts, a trading desk, practice and community.
The next big news release is already scheduled
Get warned before the next big news release.
Link your MT5 or MT4 account with its read-only password. FxMind warns you before news hits your trade. 14 days of Pro, free. Cancel any day.
No buy or sell signals, no advice. FxMind never opens a trade for you.