Use of OTP (one-time password) provides an additional level of security when working with trading accounts. The user is required to enter a unique one-time password every time to connect to an account.
One-time passwords are generated in the mobile platform for iPhone and mobile platform for Android.
To use One Time Passwords, you should bind your trading account with the password generator, which is the mobile platform for iPhone or Android devices.
Go to mobile platform Settings and select OTP. For security reasons, when you first open this section, you will be required to set a four-digit password. The password must be entered every time to access the password generator.
If you forgot your password to the password generator but still use the same mobile device, reinstall the mobile platform and rebind your account to the generator. If you no longer have access to the mobile device, contact your broker to reset the binding to the password generator.
In the window that opens, select "Bind to account".
Next, specify the name of the server on which the trading account was opened, the account number and the master password to it. Keep the "Bind" option enabled. Disable it, if you are going to unbind the specified account from the generator and stop using One Time Passwords.
If you rebind your account to another password generator, you need to enter a one-time password from the previously used generator. If you do not have access to it (for example, your mobile device is lost), contact your broker to reset the binding.
Tapping on the "Bind" button located at the top of the window binds the trading account to the generator. An appropriate message appears after that.
Likewise, an unlimited number of accounts can be bound to the generator.
The one-time password is displayed at the top of the OTP section. A blue bar below visualizes the password lifetime. Once the password expires, it is no longer valid, and a new password will be generated.
After binding a trading account to the generator, a one-time password will be additionally requested when connecting to it from the desktop platform: