Passkey

A passkey is a digital credential that allows you to log in to the HUB, OANDA's trading platforms, and TradingView without entering your OANDA email address and password. You can use passkeys to replace the traditional login method that requires a password.

Think of a passkey like a digital lock and key made specifically for each website you use.

  • The Lock: The website keeps the lock.

  • The Key: Your phone or computer keeps the secret key.

When you want to log in, the website sends a locked box to your device. Your device unlocks it automatically, but only after you prove it's really you using your face, fingerprint, or device PIN.

A passkey for these platforms is managed directly within the HUB portal. Once a passkey is set up, you can use it every time you log in to either the HUB, OANDA platforms, or TradingView, ensuring your account information and trading activity are secure.

For MetaTrader platforms, a passkey is not currently supported.

The following list shows the key benefits of using a passkey:

  • Phishing resistance: Passkeys are cryptographically tied to the specific domain they were created for. That is why you cannot accidentally give your passkey to a fake or malicious website.

  • Seamless experience: There is nothing to remember. Log in to your account with a passkey using your biometrics or a device PIN.

  • Cross-device syncing: Cloud-based password managers, such as Google Password Manager, securely synchronise passkeys across your devices, ensuring login from any device.

No, a passkey is an optional login method.

We recommend saving your first passkey on a mobile device to create a portable master key and ensure cross-device compatibility. We also recommend backing up the passkey to a cloud-based password manager, such as Google Password Manager. This ensures that you can sync the passkey across your devices.

You can create your first passkey directly on your mobile device or through your computer. Select one of the following options and follow the steps:

  1. Log in to the HUB with your email address and password.

    • If the demo and live account email addresses are different, use your respective credentials to sign in to the required account.

    • If the demo and live account email addresses are the same, your accounts are linked. You must use the live account password to sign in.

    • Remember that your password is case-sensitive and may include numbers and special characters.

  2. If you have the two-factor authentication (2FA) enabled, enter the code from the authenticator app.

  3. A new window appears to create a passkey.

  4. Tap on Create a passkey.

    • If you tap on Continue without passkeys, you will be directed to the HUB. To reinitiate the passkey setup, log out of the HUB and go to step 1.

    • If you check the Don't show me this again box, you will be able to see this window in 30 days.

  1. A new window appears to save a passkey. Continue with your preferred authentication method, for example, your fingerprint.

  2. Once your passkey is successfully saved, you will be redirected to the HUB.

  1. Log in to the HUB with your email address and password.

    • If the demo and live account email addresses are different, use your respective credentials to sign in to the required account.

    • If the demo and live account email addresses are the same, your accounts are linked. You must use the live account password to sign in.

    • Remember that your password is case-sensitive and may include numbers and special characters.

  2. If you have the two-factor authentication (2FA) enabled, enter the code from the authenticator app.

  3. A new window appears to create a passkey.

  4. Tap on Create a passkey.

    • If you tap on Continue without passkeys, you will be directed to the HUB. To reinitiate the passkey setup, log out of the HUB and go to step 1.

    • If you check the Don't show me this again box, you will be able to see this window in 30 days.

  5. Click on Use a phone, tablet, or security key.

    Do not use the Google Password Manager option in this step.

  6. Click on iPhone, iPad, or Android device.

  7. If Bluetooth on your computer is turned off, click on Turn on Bluetooth.

  8. Open a scanner app on your mobile device and scan the QR code.

  9. If Bluetooth on your mobile device is turned off, you need to turn it on.

  10. Once your mobile device is successfully connected, you will see a confirmation message on your computer.

  11. On your mobile device, a new window appears to save a passkey. Continue with your preferred authentication method, for example, your fingerprint.

  12. Once your passkey is successfully saved, you will be redirected to the HUB.

Depending on the device type, the login process differs. Select one of the following options and follow the steps:

  1. Go to the HUB.

  2. Click on Continue with a passkey.

  3. On your mobile device, a new window appears. Continue with your preferred authentication method, for example, your fingerprint.

  4. Once you have been successfully authenticated, you will be redirected to the HUB.

  1. Go to the HUB.

  2. Click on Continue with a passkey.

  3. Depending on where you have your passkey saved, select one of the following options and follow the steps:

  1. Click on Google Password Manager.

  2. You will be directed to the HUB.

  1. Click on Use a phone, tablet, or security key.

  2. Click on iPhone, iPad, or Android device.

  3. If Bluetooth on your computer is turned off, click on Turn on Bluetooth.

  4. Open a scanner app on your mobile device and scan the QR code.

  5. If Bluetooth on your mobile device is turned off, you need to turn it on.

  6. Once your mobile device is successfully connected, you will see a confirmation message on your computer.

  7. On your mobile device, a new window appears. Continue with your preferred authentication method, for example, your fingerprint.

  8. Once you have been successfully authenticated, you will be redirected to the HUB.

The process is exactly the same as creating your first passkey.

To create an additional passkey on a computer, follow these steps:

  1. After successfully logging in with your passkey on a computer, a new window appears to create a new passkey.

  2. Click on Create a new passkey.

    • If you tap on Continue without passkeys, you will be directed to the HUB. To reinitiate the passkey setup, log out of the HUB and go to step 1.

    • If you check the Don't show me this again box, you will be able to see this window in 30 days.

  3. Click on Google Password Manager.

  4. Click on Create.

  5. If your new passkey has been successfully created, you will see a confirmation window.

  1. Log in to the HUB  with your email address and password.

    • If the demo and live account email addresses are different, use your respective credentials to sign in to the required account.

    • If the demo and live account email addresses are the same, your accounts are linked. You must use the live account password to sign in.

    • Remember that your password is case-sensitive and may include numbers and special characters.

  2. If you have the two-factor authentication (2FA) enabled, enter the code from the authenticator app.

  3. Under Profile settings in the left navigation, click on Security.

  4. Within Passkey, click on Settings.

  5. Select the desired passkey you want to deactivate. Then, click on the bin icon next to it.

  6. A new window appears. Click on Delete.

  7. If your passkey has been successfully deleted, you will see a confirmation window.

You can create a maximum of 20 passkeys for your OANDA account.

Just log in using your standard OANDA account email address and password. If you have forgotten your password, refer to the steps on how to reset it in this topic.

If you no longer have the device that holds your passkey, you still have a few ways to access your account. Choose one of the following options that works best for you:

Use a backup device: If you have passkeys saved on other devices (like a tablet or secondary phone), you can use one of them to log in.

Sync from the cloud: If you have used a cloud-based password manager (like Google Password Manager) on your lost device, you can simply log into that same cloud account on a new device. Your passkey will sync, allowing you to log in.

Use your email and password: Just log in using your standard OANDA account email address and password.

Important security step: Once you have successfully logged in, deactivate the passkey for the device you no longer have. This ensures your account remains secure.

While a passkey offers industry-leading protection against phishing, the security of your trading account relies heavily on the safety of your personal devices and cloud accounts. Ensure your cloud accounts are protected with strong, unique passwords and independent multi-factor authentication.