Account security

Your account holds your investment records and your personal details, so it is gated by more than a password. This page covers signing in, resetting a password, and what we will never ask you for.

Signing in

After your password, we send a one time code to your registered email address. You enter that code to finish signing in. A session that has not completed the code step cannot reach your portfolio, your documents or your statements.

If a code does not arrive

• Check the spam or junk folder, and any filtering rule that files our mail away.
• Confirm you are checking the address you registered with, not a forwarding alias.
• Request a fresh code rather than reusing an older message, since codes expire.
• If nothing arrives at all, contact us. Do not create a second account, because it separates your records from your holdings and takes longer to unpick than the original problem.

Resetting your password

1. 1

   Request a reset from the sign in page

   The link goes to your registered email address and nowhere else.

2. 2

   Set a new password

   Use a long, unique password from a password manager. Length beats complexity, and reuse across sites is what actually gets accounts taken.

3. 3

   Sign in and complete the emailed code

   Resetting a password does not skip the code step.

Losing access to your email

If you can no longer receive mail at your registered address, you cannot reset the password or receive a sign in code, so the account has to be recovered manually. Contact us. We will verify your identity before changing the address on an account, and that check is deliberately not quick, because an attacker asking us to change an email address is exactly what it is there to stop.