Two-factor authentication (2FA)

This FAQ contains the following information:

Two-factor authentication (2FA) adds an extra level of security when you sign in to OANDA's trading platforms from either your computer or mobile device. It is designed to prevent unauthorised users from accessing your account with a stolen password.

When enabled, two-factor authentication (2FA) works by requiring an additional login credential every time you try to access your OANDA account. If you own a smartphone, we recommend using Google Authenticator to generate instant verification codes that are used to sign in to your OANDA account.

After you sign in with your current password, you will be required to request a verification code via your Google Authentication application. Once you have the code, you will need to type it when prompted to gain access to your account.

After you have configured your account for 2FA, you will be required to provide the code/unique set of numbers each time you login to your OANDA account.

Google Authenticator is a mobile application that allows you to generate verification codes on your smartphone without a network connection. Google Authenticator is the best option if you have a smartphone or tablet. Note: authentication can only be configured on one device for each application or service.

  • Google Authenticator is available for Blackberry, iPhone 3+ and Android phones and most tablets. Download the Google Authenticator app from your devices app store.
  • Do not use the 'back' button on your browser during the setup process. If you do, the one-time password won't work and you will be required to rescan the QR code, or resend an email to complete setup.

Click on this link to get started.

  1. Log in to the OANDA Account page using your email address and password.

    • If the demo and live account email addresses are different, use your respective credentials to sign in to the required account.
    • If the demo and live account email addresses are the same, your accounts are linked. You must use the live account password to sign in.
    • Passwords are case sensitive and special characters are accepted.

  2. In the Profile section, go to Configure Two Factor Authentication .

  3. Click on BEGIN SETUP.

  4. Scan the QR code using Google Authenticator, enter the code and continue.

  5. Copy the recovery code in a place you can retrieve from in future. Next, select I have safely recorded this code and continue.

  6. Two-factor authentication is enabled. Click on Cancel to go back to the OANDA Account page.

Clients must take the following steps:

  1. Log in to the OANDA Account page using your email address and password.

    • If the demo and live account email addresses are different, use your respective credentials to sign in to the required account.
    • If the demo and live account email addresses are the same, your accounts are linked. You must use the live account password to sign in.
    • Passwords are case sensitive and special characters are accepted.

  2. Enter the code from the Google authenticator. Next, click on Continue. This step completes your login and successfully signs you in.

  1. Log in to the OANDA Account page using your email address and password.

    • If the demo and live account email addresses are different, use your respective credentials to sign in to the required account.
    • If the demo and live account email addresses are the same, your accounts are linked. You must use the live account password to sign in.
    • Passwords are case sensitive and special characters are accepted.

  2. In the My Profile section, go to Configure Two-Factor Authentication .

  3. Click on DISABLE to deactivate Two-factor Authentication and go back to the OANDA Account page.

Contact our customer support for assistance in getting access to your account.