Extra login security with multi–factor authentication

Give your account security a boost and help prevent financial loss by adding a layer of protection when you log in.

An extra security step at login not only helps prevent scammers from accessing your accounts and data—even if they somehow managed to steal your password—it can also give you a heads up if someone is trying to log into your account without your permission. 

Multi–factor authentication (MFA) options

Set up fast and secure logins with a passkey

Passkeys provide a fast, secure, and passwordless way to log into your Fidelity account.

  • Fast, convenient logins: Logging in is easy. You can log in the same way you unlock your device – with a fingerprint, face scan, or device PIN.
  • High security: Passkeys help protect against tricks scammers commonly use – they only work with the real website and do not use things a scammer can steal, such as a password or security code.

Passkeys can be created and stored directly on your device, such as a laptop or mobile phone, or other supported devices, like hardware keys. You can also use a password manager that supports passkeys, which allows for syncing across multiple devices. After setting up a passkey, you can use it to log in quickly and securely.

Approve logins with your Fidelity mobile app

Approve or deny a notification on your mobile device when there’s an attempt to log into your account on the Fidelity website. If you’re enrolled in biometrics on your Fidelity Investments mobile app – such as facial ID or fingerprint – and have push notifications enabled, you’ll receive a notification that alerts you of the login.

Make sure you’ve downloaded the Fidelity Investments mobile app and have set up biometric login, like fingerprint or facial recognition, and have enabled notifications.

Connect an authenticator app

Authenticator apps provide you with a unique code to enter after your username and password. These codes change frequently in your authenticator app, so they are resistant to phishing scams and other fraudulent activities.

After downloading an authenticator app from your device’s app store, it can be connected directly to your Fidelity account. We allow connections to most authenticator apps, including ones that are widely used, such as Google Authenticator, Microsoft Authenticator, and the Passwords app for iOS.

You can connect an authenticator app in your security settingsLog In Required or in your Fidelity Investments mobile app.

More ways to secure your login

Trust your personal devices

When you log in on a personal device you trust, you can skip MFA on future logins. Select the “Remember this device” checkbox when you log in to add it to your trusted device list, which you can view and manage in your security settingsLog In Required. Trusted devices only require MFA occasionally. For your security, MFA will still be required for certain sensitive transactions.

Never choose to remember public devices, like library computers, or a device using a public, unsecured Wi-Fi network to access your accounts.

Make sure your contact information is up to date

Accurate contact information supports security by allowing you to receive real-time alerts for important transactions, such as updates to your profileLog In Required information, or transferring money from your accounts.

Confirm or update your email and mobile phone number in your profile, so you can receive important security information.

View this page in Spanish


Multi-factor authentication FAQs

  • How do passkeys strengthen my account security?
    Passkeys only work with real websites and do not use things a scammer could steal, such as a password, or security code. This provides protection against common tricks scammers use when attempting to gain access to accounts.
  • Can I still log in with my password after setting up a passkey?
    A passkey is designed to let you log into your account without having to enter a username and password.
    If you have set up a passkey and enter your username and password, you may be prompted to complete your login using a passkey.
  • What happens if I lose my device where I store my passkey?
    If you've set up another strong login option, such as an authenticator app or push notifications, you may be able to use it to log in and regain access to your account.
    • If you're unable to log in, contact us for help restoring access to your account.
    • If your passkey was synced to the cloud, you may be able to recover it by following the recovery instructions provided by your password manager provider.
  • Do I need to set up passkeys on all of my devices?
    If your passkey is synced through the cloud, you only need to set it up once. You can use it on any device logged in with the same account where the passkey is stored.

    If your passkey is only saved on one device, it won't automatically be available on your other devices. In that case, you can:
    • Use the device that has the passkey to help you log in on another device.
    • Create additional passkeys on your other personal devices so you can log in more easily in the future.
  • Which authenticator app should I use?
    If you already have an authenticator app that you use for work or other personal accounts, you can connect your Fidelity account directly. If you aren’t already using one, you can search for “authenticator app” in your mobile device’s app store to find one that works for you. Fidelity allows you to use most of them, including Google Authenticator, Microsoft Authenticator, and the Passwords app for iOS.
  • Do I have to enter an authenticator app code each time I log in?
    By default, yes, you will enter a code from your authenticator app each time you log in. However, you can skip this step by selecting “Remember this device.” We will then trust the device and won’t require you to go through multi-factor authentication at log in—but that extra step may still be required for certain transactions. You can manage your trusted devices in your security settings.
  • What should I do if I get a new mobile device?
    When getting a new device, set up and connect your authenticator app before disposing of your old device. Some authenticator apps make it easy to transfer connections to a new phone by scanning a QR code on your old device.
  • How do I prevent losing access to my authenticator app?
    Options vary across apps, but saving any recovery codes from your app in a secure place is suggested.
  • How do I stop using an authenticator app?
    If you decide to stop using the authenticator app, go to your security settings to remove it as a multi-factor authentication option before deleting the app from your device.
  • What should I do if I lose access to my device or authenticator app?
    Give us a call, we’ll get you back into your account.
  • How can I protect my authenticator app account?

    Be sure to enroll in the security options your authenticator app offers. You can also protect the device the app is on by keeping it in a safe place, installing software updates when available, and using biometrics (fingerprint or facial ID) to log in.

    Remember, if you get an unrequested call or text asking for your Fidelity security code, stop. It's a scam. Never read back a security code unless you initiated a call to our official phone number. Never type the code into your phone or a website unless you are clearly on an official Fidelity app or website.

  • What transactions require extra security steps?
    You will be prompted to verify your identity when you perform sensitive transactions such as setting up new bank instructions or changing your contact information. It is possible you may not get prompted for additional verification during the transaction because we will have already verified your identity when you logged in.
  • What if I am not seeing the 'Remember this device' checkbox?
    Check your security settings to see if you have already trusted the device. If the device is not trusted, try clearing your internet browser's history or cache. The process for doing this will vary depending on your specific browser.
  • What should I do if the one-time passcode doesn't work?

    Make sure you're using the security code that's in the text message itself, not the incoming number from the sender. If this doesn't solve the problem, select, "Request a new code."

    Complete the steps for requesting a new code. If you're receiving the code by phone, make sure you are near that phone. We can only send text messages to a mobile phone.