Is it safe to give someone your MT5 password?

An EA host or operator will ask for your MT5 login. Here is what each of your three passwords unlocks, what can really go wrong, and how to take access back in a minute.

Last updated 2026-10-20

Anyone who wants to run an EA for you, host a terminal or copy trades into your account will ask for an MT5 login. Before you send anything, it helps to know exactly what each password unlocks, what can really go wrong, and how to take access back in a minute.

The three passwords, and what each one can do

1. The trading password (also called the master password)

This is the full MT5 login. With it, someone can open, close and change trades, and run an EA on your account. It is what any hosting service or EA operator needs, because without it nothing can trade.

What it cannot do: withdraw money. MetaTrader has no withdrawal function at all. Deposits, withdrawals and transfers only happen in your broker's client area, which uses a different login.

2. The investor password (read-only)

The investor password opens the same account in view-only mode. You can see the balance, the open positions and the history, but nothing can be traded. It is the right one to share when someone only needs to look: a friend checking your results, or a site that tracks performance. It is useless for running an EA, because an EA has to place trades.

3. The broker client-area login

This is the email and password for your broker's website or app: the place where you deposit, withdraw, move money between accounts and change account settings. Never share it with anyone, for any reason. No legitimate EA or hosting service ever needs it.

What can really go wrong with a shared trading password

The honest answer is not “they take your money”. It is these two things:

• Bad trading. Whoever holds the trading password can trade your account however they like, including badly. A reckless EA or a careless operator can lose a large part of the balance without ever withdrawing a cent. That is the real risk, and it is why the account should only hold money you can afford to lose.
• Being locked out. The trading password can be changed from inside MT5. Someone who changes it locks you out of trading until you reset it in your broker's client area, which only you can access.

Both are limited by one thing you always keep: the client area. As long as that login stays yours, your money stays where it is, and you can reset the trading password at any time.

How to take access back

Change the trading password. Every terminal using the old one loses access, usually at once and at the latest the next time it reconnects, including any server that was running an EA for you.

MT5 on a computer: Tools → Options → Server → Change
Or in your broker's client area: look for “change trading password” on the account

That is all it takes. Nobody can stop you, and nobody needs to be asked.

Before you share it: a short checklist

• Use a separate account for the EA or hosting, not your main one, funded only with what you can afford to risk.
• Share only the trading password, never the client-area login, your email password or a two-factor code.
• Send it through an encrypted form, not by email, chat or WhatsApp, where it sits in plain text forever.
• Keep two-factor login on in your broker's client area, so withdrawals need you.
• Watch the account from your own MT5 app. Every trade shows up there.
• Change the password the day you stop using the service.

Red flags

• They ask for your client-area login, your email password or a verification code.
• They want remote access to your computer (AnyDesk, TeamViewer) to “set things up”.
• They ask you to send your deposit to them, instead of keeping it in your own account.
• They take a share of your profits or promise results.
• They want the password by chat and get impatient when you ask questions.