Protecting your online visits
Security questions and answers
We may prompt you to answer one of your security questions when you log in from a new computer for the first time or when you change your password. This will block those trying to gain unauthorized access to your accounts. We allow you to create up to four security questions in Your ProfileLog In Required.
Username and password requirements
To help prevent unauthorized access, we prompt you to create a unique username and password when you first access your account. The strongest passwords are long and employ a mix of numbers, upper and lower case letters, and special characters. Learn more about updating your password
Extra login security
Our partners at Symantec make it possible for us to offer two-factor authentication, a technology that helps prevent someone from gaining illegal access to your accounts, even if they've guessed your username and password.
Symantec's Validation and ID Protection (VIP) Access application will generate a random code that you'll be asked to enter each time you log in to your Fidelity account. That extra code makes it incredibly difficult for someone attempting to penetrate our already robust defensive measures. Learn more or download the application
At Fidelity, convenience and safety of your account is of utmost importance. To help lessen the chance of unauthorized access of your account, we'll automatically log you off after observing a period of inactivity.
Your account activity is hidden from prying eyes as it travels over the Internet to our servers thanks to our strong 128-bit, two-way data encryption. This is the strongest encryption technology available to us. Look for the "https:" at the beginning of the web address to know it's working. You'll see it even before you log in.
You can send our customer service team secure, encrypted messages once you're logged in to our website. Never send us information regarding your accounts unless it's through this secure channel. Have a question you need to send securely? Send us a secure message
We will never ask for your confidential data like account numbers, username and passwords via email. When we do email you, we digitally sign all customer emails so that you can verify that the message isn't forged or altered.
This enhanced security feature is designed to prevent someone from accessing your account, even if they have your password. It requires you to verify your identity using a random sequence of six numbers that can be sent to your email, mobile phone, or alternate phone number. See how two-factor authentication works
Safeguards inside Fidelity
Whether you visit us online, by phone, or at an Investor Center, we always verify your identity before granting access to your accounts.
We're on the lookout for suspicious irregularities across our network and infrastructure every day, all day. We will promptly alert you if we spot a problem that affects you.
Firewalls are protective barriers that defend Fidelity networks and computer systems from hackers and cyber attacks trying to gain access into our data centers. We use some of the strongest firewalls available in the industry to guard the information housed in our servers.
We monitor transactions for suspicious and unusual behavior to ensure that they are authentic and legitimate. If we detect abnormal activity in one of your accounts, we will notify you immediately.
Security at our branches and offices
Our security measures extend far beyond our website. We vigilantly monitor all work areas in order to prevent theft or scrutiny of documents containing sensitive information. In addition, authorized personnel can only enter work areas through use of a security badge.
Restricted access to data
We limit access to systems containing customer data to only those employees who need it to conduct business. We continually monitor access and only grant it to new people on a case-by-case basis.
We make sure that our employees know and adhere to our security policies. We require periodic training on our security policies for all personnel, no matter their department. Personnel who work directly with customers receive extra training on emerging risks, such as identity theft.