The MT5 investor password is a built-in MetaTrader 5 feature: a second password on every MT5 account that grants read-only access. It can view balance, history, and positions but cannot place, close, or modify a single trade. This is not a software promise. It is enforced by the MetaTrader protocol itself. Any authenticated connection using the investor password literally cannot send trade instructions to your broker.
If a third-party discipline app, journal, or analytics tool asks for your MT5 credentials, the right credential to share is the investor password, never the master. This article explains why, how the two passwords differ, where to find yours, and what to look for in any third-party tool asking for it.
Master password vs investor password
Every MT5 account has two passwords, both set by you or your broker:
| Capability | Master password | Investor password |
|---|---|---|
| View account balance | Yes | Yes |
| View trade history | Yes | Yes |
| View open positions | Yes | Yes |
| Place new trades | Yes | No (blocked at protocol level) |
| Close existing trades | Yes | No (blocked at protocol level) |
| Modify stop-loss / take-profit | Yes | No |
| Change account settings | Yes | No |
| Withdraw funds (where permitted) | Yes | No |
The master password is what you use yourself when logging in to MetaTrader to trade. The investor password is a deliberate read-only delegation: meant for sharing with people or tools who need to see your account without being able to act on it.
Why this matters for third-party apps
Many trader-facing tools need account data to work: journals like Edgewonk or Tradezella, analytics dashboards, behavioural risk tools like EmotionLock or PsyRule. They need to read your trades. None of them need to place trades for you.
A well-designed tool asks only for the investor password. This means:
- Reduced attack surface.If the tool's database is ever breached, the leaked credential can only read trade history. It cannot move money, close positions, or alter your account.
- Trust signal. A tool that asks specifically for the investor password is signalling that its design constrains its own capabilities. A tool that asks for the master password is asking for more access than it needs.
- Reversibility.You can change the investor password any time in MT5 without affecting your own trading login. The third-party tool's access ends the moment you rotate that password.
Where to find your MT5 investor password
The exact path in MetaTrader 5:
- Open MetaTrader 5 on desktop. (The mobile MT5 app does not allow changing the investor password.)
- Click Tools in the top menu, then Options.
- Switch to the Security tab in the Options dialog.
- You will see two fields: master and investor password. You can either view the existing investor password or click "Change" to generate a new one.
- If you have never used the investor password, set one now. Pick a strong password different from your master.
If you cannot find a Security tab, your broker may have a custom MT5 build. In that case, contact your broker's support and ask them to set or reset the investor password on your account.
What to look for in any tool asking for it
Before entering your investor password into a third-party app, verify three things.
1. The app explicitly asks for the investor password, not the master
The field should be labelled "investor password" or "read-only password". If the app asks for "your MT5 password" without specification, ask the developer which one they mean. If they want the master password, do not use the tool.
2. The password is not stored in the app's own database
The safest pattern: the app forwards your password once to a SOC2-certified MT5 connectivity provider (the most common is MetaAPI) and then deletes the credential from its own systems. The provider stores the encrypted credential on its purpose-built infrastructure, separate from the app vendor.
EmotionLock follows this exact pattern. The investor password is transmitted once to MetaAPI (SOC2 Type 2 certified, used by over 100,000 traders) and deleted from EmotionLock's backend. Only your MT5 server name and account number are stored. See the full security breakdown for the step-by-step.
3. You can revoke access instantly
You should always be able to disconnect the tool inside the app, and you should also be able to invalidate the credential entirely by changing the investor password in MT5. That second route is the universal kill switch: it works even if the third-party tool is unresponsive.
Edge cases and common confusions
Can the investor password be used to withdraw funds?
No. Withdrawal is a write operation, blocked at the protocol level for investor-password connections. Even if your broker allows in-platform withdrawal requests (most do not), the request would be rejected.
Does the investor password expire?
No, unless your broker explicitly sets an expiration. The investor password persists until you change it.
What if my broker only gave me one password?
Many brokers default to issuing only the master password and require you to generate the investor password yourself. The path above (Tools, Options, Security) is where you do this.
Does changing the investor password log out my third-party app?
Yes. Once the old password is invalidated, the third-party app loses access at the MetaAPI level. You will need to reconnect with the new password if you want to keep using the tool.
Can I have different investor passwords for different tools?
No. There is only one investor password per MT5 account at a time. If you use multiple tools, they all share that single read-only credential.
Frequently asked questions
What is the MT5 investor password?
The MT5 investor password is a built-in MetaTrader 5 feature: a second password on every MT5 account that gives read-only access. It can view balance, history, and open positions but cannot place, close, or modify any trade. This is enforced by the MT5 protocol itself, not by the broker or any third-party app.
How is the investor password different from the master password?
The master password gives full trading access: place trades, close trades, change settings, withdraw funds (if permitted by broker). The investor password is read-only and can do none of those things. Both passwords work on the same account but provide different permission levels.
Where do I find my MT5 investor password?
Open MetaTrader 5 on desktop, go to Tools → Options → Security. From there you can view or change the investor password.
Is it safe to share the MT5 investor password with a third-party app?
The investor password cannot be used to trade your account because the MT5 protocol blocks write operations for read-only credentials. Even in a worst-case breach of the third-party app, the credential would only expose trade history, not the ability to move funds. Always check whether the app stores the password (riskier) or forwards it once to a SOC2-certified backend like MetaAPI and then deletes it (safer).
What if a tool asks for my master password?
Do not use the tool unless there is a specific operational reason (such as automated trade execution that requires it). For read-only use cases like journaling, analytics, or discipline tools, the master password is more access than the tool needs.
The summary
The MT5 investor password is the read-only credential designed exactly for situations where an app, person, or service needs to see your account without acting on it. Tools like EmotionLock use only the investor password by design, which is why they cannot place or close a single trade on your account, regardless of any software bug, hack, or compromise. The protocol itself enforces the boundary.