Extra login security with multi–factor authentication

Give your account security a boost and prevent unauthorized access by adding multi-factor authentication (MFA) at login.

Using an extra step at login not only helps prevent scammers from accessing your accounts and data—even if they somehow managed to get your login information—it can also give you a heads up if someone is trying to log into your account without your permission. 

To increase your security when you log in, visit your SecurityLog In Required settings and turn on your preferred MFA method.

Make sure your contact information is up to date

Confirm or update your email and mobile phone number in your ProfileLog In Required, so we can reach you when we need to. This not only supports MFA, but also allows you to receive real-time alerts for important transactions, such as updates to your profile information, or transferring money from your accounts.

Approve logins with push notifications

This convenient option relies on biometrics – which means your device recognizes your face or fingerprint – and does not require a security code. This sends a notification to a customer's mobile device(s) that allows you to verify a login attempt—or deny it if they believe the login attempt is fraudulent.

How to turn on push notifications

Download the Fidelity Investments app, turn on device notifications, and make sure you’re enrolled in biometrics, like fingerprint or facial recognition. If you do not already have MFA enabled, access your Security settings to enroll.

Authenticator apps

Authenticator apps add a layer of security to online accounts by adding a verification step beyond username and password. We support most authenticators, so you can download the app that works best for you.

Once enrolled, you will be prompted to enter the time-sensitive code from your authenticator app after you enter your username and password when logging into Fidelity.

Trusted devices

A trusted device is a phone, computer, or any other device that you've already used for a Fidelity login that required MFA and have asked us to remember. Once you log in and check the "Don't ask me again on this device" box, that device is added to your trusted device list. Once a device is trusted, we won’t ask you to log in with multiple steps anymore. However, we’ll still rely on MFA for certain sensitive transactions.

If you no longer wish to trust a device, or if one of your devices is lost, stolen, or compromised, you can remove those devices in your SecurityLog In Required settings.

One-time security code by text or call

Another option is to have Fidelity send a 6-digit security code directly to your phone via text or voice call. The code is not a password that you need to create and remember—simply enter the one-time code you receive to verify it's you.

Never follow links in unrequested emails or text messages or read back one-time security codes to unsolicited callers asking for this sensitive information.

Extra login security FAQs