MT5 Investor Password: What It Is, Where to Find It, and Why It's Safe to Share
Updated 13-07-2026 · 6 min read · by the TradeStats team
Every MetaTrader account — MT4 and MT5 — actually has two passwords. The master password is the one you log in with to trade. The investor password is a second, separate credential that opens the same account in read-only mode: anyone using it can see the balance, equity, open positions and full trade history, but cannot place, modify or close a single order, and cannot touch withdrawals.
That distinction is enforced by the broker's server, not by the app you type it into. When a terminal logs in with an investor password, the server flags the whole session investor mode — trading disabled, and every trading function is rejected before it reaches the market. There is no setting on the client side that can escalate a read-only session into a trading one.
What the investor password is for
It exists for exactly one purpose: letting someone verify an account without controlling it. The classic uses:
- Trade journals and analytics tools (like TradeStats) that sync your history automatically and keep your dashboard up to date without you exporting statements.
- Proof of performance. A signal provider or fund manager hands the investor password to an auditor or prospective client, who can watch the account live and confirm the track record is real.
- Prop-firm and account-manager monitoring — the risk desk watches, the trader trades.
How to find or set it (MT5)
- Open the MT5 terminal and log in with your normal (master) password.
- In the Navigator panel, right-click your account number → Change password.
- Tick "Change investor (read only) password", enter your master password once to authorize, and set the new investor password.
On MT4 it's the same idea via Tools → Options → Server → Change. Many brokers also let you set both passwords from their client portal — look under account settings. If you were emailed an investor password when the account was opened and lost it, just set a fresh one; the old one stops working immediately.
Safety, honestly stated
Sharing an investor password reveals information, not control: whoever has it can see your balance and your trades. Share it with tools and people you actually want reading the account, and rotate it (set a new one) whenever you stop using a service. What it can never do — by protocol — is trade, withdraw, change settings or lock you out.
One practical tip: make the investor password differentfrom your master password. Some traders set them identical out of convenience, which silently turns every "read-only" share into a full-control share. A good tool will refuse to work if it detects it was given a master password, but don't rely on that.
How TradeStats uses it
TradeStats connects to your broker with the account number, server name and investor password — three fields, nothing else. The credential is encrypted at rest (AES-256-GCM) and used by our sync farm to read your history about once an hour. Because the session is investor-mode, the platform cannot trade on your account even in a worst-case scenario — the broker's server enforces it. Your stats, gain %, and verifiable track record build themselves from there.
Struggling with the third field? See how to find your exact MT5 server name— the most common connection mistake isn't the password at all.
FAQ
Can someone trade or withdraw with my investor password?
No. The investor password is read-only by design, enforced by the broker's MetaTrader server. It can view balance, equity and trade history, but every trading and withdrawal function is disabled at the server level.
Where do I find my MT5 investor password?
In the MT5 terminal: right-click your account in the Navigator → 'Change password' → tick 'Change investor (read only) password' and set one. Some brokers also show it in their client portal under account settings.
Is the investor password the same as my main password?
No — never share your main (master) password. The master password can trade. The investor password is a second, separate password that exists precisely so tools and auditors can view an account without any control over it.