Account security

Investor password vs master password: the difference that protects your money

Capital Flow Algo  ·  4 min read

Every MetaTrader 5 account is issued with two separate passwords. They look identical — a string of characters — but what they permit is completely different. Confusing them is the most common and most expensive mistake a new trading client makes.

The master password

The master password is full control. Anyone holding it can log in and open positions, close positions, change settings, and in many broker setups begin the withdrawal process. It is the equivalent of your net-banking login.

Never share it. Not with a signal provider, not with a "manager", not with anyone who contacts you claiming to be support. A legitimate firm will never ask for it.

The investor password

The investor password is read-only. Somebody holding it can see everything — open positions, closed trade history, balance, equity, the full record — and can change nothing. No trades, no settings, no withdrawals. MetaTrader enforces this at the platform level; it is not a policy, it is how the software works.

This is what makes genuine transparency possible in this industry. A firm can publish an investor password publicly and prove its results to the world without exposing the account to any risk at all.

Side by side

Investor passwordMaster password
View trades and historyYesYes
View balance and equityYesYes
Open or close a tradeNoYes
Change account settingsNoYes
Safe to share publiclyYesNever

How to find yours

Both passwords are issued by your broker when the account is created, usually in the welcome email or inside the client portal under account settings. You can reset either one at any time from the portal, or from inside MT5 under Tools → Options → Server → Change, which offers both password types.

How to test which one you are holding

If you are not sure, the test takes thirty seconds. Log into MT5 with the login and the password in question, then try to place a trade. If the New Order button is greyed out or the order is rejected, you are on an investor password. If the trade goes through, you are holding the master password — and if you have shared that password with anybody, change it now.

What this means when you work with us

  • We ask for trading access only, so the algorithm can place trades. We never ask for your withdrawal credentials, and we cannot move money out of your account.
  • You keep your master password and your broker portal login private — including from us.
  • You can revoke our access instantly by resetting the trading password. Nothing else is needed to disconnect.
  • The logins we publish on this website for our own accounts are investor passwords. That is why we can put them on a public page without any risk — and why you can inspect our trading without asking anyone's permission.

The rule worth remembering

If anyone asks for your master password, your broker portal login, an OTP, or a card number, the conversation is over. There is no legitimate reason for any of those requests, whoever they claim to be.

See our published investor logins

We publish read-only logins to our own live trading accounts. Check every trade yourself before you speak to us.

Keep reading

More from the Learn section