Should you give an analysis tool your MT5 password?

Updated on September 9, 2026

MetaTrader 5 gives you two passwords

Most traders never notice, because they only ever use one. When you open a MetaTrader 5 account, your broker issues two, and they do not open the same doors.

The first one, the master password, gives full access: view the account, place orders, move a stop, close a position. It is the one you use to log into your platform. The second, the investor password, gives read-only access: it shows the balance, open positions, history and charts, but any attempt to place an order is rejected.

What matters is where that limit is enforced. It is not a setting inside the tool you hand the password to, it is a rule applied by your broker’s server. Software holding your investor password cannot trade your account, even if it wanted to, even if it were malicious, even if it were breached. That is not a promise anyone is making to you, it is a technical impossibility.

Which makes the question far less frightening than it sounds. It is not « do I trust this tool », it is « which password am I giving it ».

What a tool can actually do with each one

With the investor password, a tool can:

• read your balance and equity, and therefore size a position against your risk;
• read your open positions and your trade history;
• read live prices and pull the candles needed to analyse a chart.

With the master password, it can do all of the above, plus:

• place an order, at market or pending;
• move a stop loss or a target on an open position;
• close a position.

And here is what neither one allows, which is probably the most reassuring part: withdrawing or transferring money. With any serious broker, a withdrawal goes through the client area, with separate credentials, identity verification and often an email confirmation. MetaTrader exposes none of that. An MT5 password, master included, cannot move funds out of your account.

Where to find your investor password

If you have never set one, you need to create it, and there are two routes for that. From MetaTrader 5, right-click your account in the Navigator panel and open the change-password option: a checkbox or a dropdown lets you choose between the master and the investor password. Most brokers offer exactly the same thing from their client area, in the trading account settings.

Pick one that is different from the master. That is the entire point of the exercise: if the investor password ever leaks, it must reveal nothing about the other one.

The questions to ask before connecting an account

Whether the tool is ours or someone else’s, these five questions give you a fairly accurate picture of how serious a service is.

• Does it accept the investor password? A tool that only analyses only needs to read. If it refuses to work without the master password, ask why.
• What happens to the password once sent? Stored in plain text, or encrypted? The answer should be public and easy to find.
• Can you delete it yourself? In one action, from the interface, without emailing support.
• Can an order be placed without you doing anything? The answer should be no by default, and any automation should be something you switch on.
• What happens if you change the password at your broker? The connection should simply stop working. That is your emergency stop, and it stays in your hands.

The signals that should make you walk away

Some behaviours are not clumsiness, they are warnings.

• The service demands the master password for a feature that only needs to read.
• It advertises a return, a guaranteed win rate, or describes itself as « risk-free ». Trading always carries a risk of losing capital.
• It asks you to deposit into an account that is not yours. An analysis tool never needs to touch your money.
• Nothing tells you how to remove your credentials, or how long they are kept.
• It discourages you from trying on a demo account first.

What if you want the tool to place the orders

There is no way around it: execution requires the master password. That comes from MetaTrader, not from the tool.

What that implies deserves to be said plainly. A service holding your master password can technically trade your account. You cannot delegate execution and keep the read-only guarantee at the same time.

The sensible path has three steps. Start read-only, with the investor password. Judge the quality of the analysis over several weeks, risking nothing. And if you then decide to go further, do it on an account whose loss would not hurt. A demo account lets you walk that entire path as a dry run.

Where AlphaGPT stands

Since this page asks the question, we may as well answer it for our own tool.

AlphaGPT works with an investor password: full analysis, live price reading and position sizing all account for it. The application detects on its own that an account is read-only and tells you, instead of letting you find out when an order gets rejected.

Your credentials are encrypted and you can delete them in one click from the app, without emailing anyone. And no order is ever sent unless you click: the analysis prepares the numbers, the decision stays yours.

If you want one-click execution, you will need the master password. That constraint is the same for everyone and it comes from MetaTrader. Our advice is the one we would give for any tool: start read-only.

What remains is where to find it, which our guide on the MT5 investor password explains, and which other fields you will be asked for, in the one on the server name and account number.

And if your question is less about which password to pick than about what a program can technically do with your account, the full answer is on our page about what an analysis tool can and cannot do.