How you're protected
There are a number of ways we work to keep your Robinhood account safe.
Member of SIPC, which protects securities customers of its members up to $500,000 (including $250,000 for claims for cash). Explanatory brochure available upon request or at www.sipc.org.
SIPC coverage does not protect against a loss in the market value of securities. Cryptocurrency investments through Robinhood Crypto are not protected by SIPC and that Robinhood Crypto is not a member of FINRA or SIPC.
The Robinhood Security Team uses a number of industry-standard measures to protect your account and ensure your experience with us is safe and secure. We understand that you place a lot of trust in our services, and we're constantly working to ensure Robinhood is one of the safest places for you to build your financial future.
Here are a few of the security measures we take to help keep your information safe:
Password Safety
When we store your account passwords, we hash them using the industry-standard BCrypt hashing algorithm and never store them in plaintext—which means they're stored in a scrambled format that makes them difficult and time-intensive for attackers to crack.
Encryption
Sensitive information, such as your Social Security number, are encrypted before they’re stored. In addition, our mobile and web applications securely communicate with our servers using the Transport Layer Security (TLS) protocol with up-to-date configurations and ciphers. TLS helps ensure that anything you send to our servers remains private—including your personal and account information such as your password, bank account, and more.
Once we verify your banking credentials, we’ll never access them again. We use trusted third-party integrations to access information about your bank account, such as your account number and available balance.
Two-Factor Authentication
Two-Factor Authentication (2FA) helps protect your Robinhood account by requiring two sources of verification to sign in to your Robinhood account: something you know (your password) and something you have (a one-time verification code or device approval request). Every time you log in or make changes to your Robinhood account, you’ll be required to verify your identity before completing the action. This step helps protect your Robinhood account, even if someone knows or guesses your password.
All Robinhood accounts are protected with 2FA for new devices. This is a layer of security applied to all Robinhood accounts—this helps us ensure it's really you signing in to your Robinhood account.