Security best practices
Using strong passwords, enabling two-factor authentication (2FA), learning how to identify scams, and monitoring your login activity can help protect your account.
We encourage turning on 2FA to add an additional layer of security to your Robinhood account. 2FA helps protect your Robinhood account by requiring 2 sources of verification to sign in to your Robinhood account: something you know (your password) and something you have (a one-time code or device approval request).
Every time you log in or make changes to your Robinhood account, you’ll be required to verify your identity before completing the action. This helps protect your Robinhood account, even if someone knows or guesses your password.
We encourage you to set up 2FA for all your online accounts—especially for the email associated with your Robinhood account and your phone provider.
One of the most important things you can do is use a strong password for your Robinhood account. A strong password:
A great way to make a strong password is to use a passphrase that’s easy for you to remember, but difficult for others to guess. You can also consider using a password manager to create and store strong passwords as well.
Never share your password. If you’ve shared your Robinhood credentials with anyone else or if you use the same password for a different online account, change your password immediately and enable 2FA for your Robinhood account.
Device monitoring allows you to view and manage every device that has been used to log in to your Robinhood account.
To view your devices:
It’s important to remain vigilant and keep an eye on your activity. We recommend regularly reviewing the listed devices and removing any you don’t recognize or no longer use. If you have activity that you don’t recognize or didn’t authorize on your account—or have any other reason to believe it has been compromised—contact Robinhood Support immediately by emailing report@robinhood.com or by requesting a call from a live agent within your Robinhood account.
SIM swapping is a type of fraud scheme where scammers transfer your phone number to a new SIM card under their control, enabling them to intercept verification codes and access your accounts.
To safeguard your phone number from SIM swapping attacks, you must work with your phone carrier to set up additional security measures they offer, such as setting up a PIN or password for any changes to your account like SIM card swaps. By adding this extra layer of protection, you can help prevent unauthorized access to your phone number.
Be proactive in monitoring your phone's network connectivity and activity. If you notice any sudden loss of service or unusual behavior on your device, contact your phone carrier immediately to investigate the issue. Promptly reporting any suspicious activity can help mitigate the risks associated with SIM swapping attacks.
If you suspect your phone number has been compromised or if you experience any unauthorized access to your accounts, including your Robinhood account, contact Robinhood Support immediately for assistance.
Scammers can target any account, and learning how to identify scams can help you safeguard your information.
Phishing and impersonations are common ways that scammers will target you to get sensitive information, such as your username and password, Robinhood account information, or Social Security number. A scammer may call, email, or text you, or even reach out to you through social media, pretending to be someone from Robinhood or another company or authority you know or trust. Remember that scam websites, links, and social media profiles may look similar to real websites or profiles you recognize.
Robinhood Support will never do the following:
Links to third-party sites are being provided for informational purposes only. Robinhood isn’t affiliated with and doesn’t endorse, authorize or sponsor any of the listed third-party websites, applications, or their respective sponsors. Robinhood isn’t responsible for the content of any third-party website or the collection or use of information regarding any website's users or members.