Security and revoking access

At the end of this guide you will know what PipLoop can and cannot do on your trading account, and how to stop automation and cut PipLoop’s access to your MT5 account.

What PipLoop holds, and what it does not

• Your money stays at your broker. PipLoop never holds funds.
• PipLoop never asks for your broker password. You connect MT5 with an EA API key that you generate in Settings → MT5 Connection and paste into the EA in MT5 (Connect an MT5 account).
• PipLoop stores only a digest of the key. It keeps a one-way digest to check the EA when it connects, never the key itself. Treat the key like a password: don’t share it or post it in screenshots.
• Only the EA in your own MT5 places orders. PipLoop sends your instructions to the EA; the EA opens, changes and closes orders at your broker. With no EA running, nothing reaches your account.

Stop automation

1. AutoDrive: switch the master switch OFF. New automatic entries pause; existing positions and protection are still managed. To close what AutoDrive holds on the symbol, use CLOSE ALL (Set up AutoDrive).
2. Flow Builder: in a running Flow, select ■ Stop, then Stop · keep position or Stop · close all. On the Flow Builder list, Stop all on … stops every Flow on that account and keeps their positions.

Revoke access to your MT5 account

1. Open Settings → MT5 Connection.
2. Under EA API keys, find the key you want to cut off. Each key shows when it was issued, the account it connects and when it was last used. Select Revoke.
3. Select Revoke key in the dialog. The key is marked Revoked in the list. An EA using it is disconnected at once and can no longer connect.
4. In MT5, remove the EA from its chart. With the EA gone, PipLoop has no connection to the account.
5. Check your open positions and pending orders in MT5, and close any you don’t want to keep.

To connect again later, generate a new EA API key and paste it into the EA.

Keep your PipLoop sign-in safe

• Verify your email. Until you do, a banner asks you to, and you can’t generate an EA API key. Use Resend email on the banner, or Resend verification email in Settings → Profile & security.
• Change your password in Settings → Profile & security → Change password with your Current password and a New password. Other devices are signed out, and PipLoop emails you about the change.
• Sign out other devices under Devices signs out everywhere except this browser.
• Failed sign-ins pause sign-in. After repeated failed attempts, sign-in for that email pauses for a while and PipLoop emails you. During the pause, sign-in answers Email or password is incorrect. If it wasn’t you, reset your password with Forgot password?.

Details: Create an account and verify your email.

If you think someone else has access

1. Change your password, then select Sign out other devices.
2. Switch AutoDrive OFF and stop any running Flow.
3. Revoke the EA API key and remove the EA from MT5, as above.
4. Check your positions and history in MT5, then change your broker password at your broker.
5. Contact PipLoop support with what you saw and when.

PipLoop emails you when your password changes or sign-in is paused. If you get one of those emails and it wasn’t you, start with step 1.