What PipLoop can and can't do on your account
PipLoop is software, not a broker. It never holds your money and never asks for your broker password. Orders reach your account only through the EA on your own MT5, and you can stop them at any time.
- 1YouSet your rules or place a trade, on desktop or phone.
- 2PipLoopSends the order to your EA. Never receives or holds money.
- 3EA on your MT5Places the order by the rules you set. Remove the EA and the connection ends.
- 4Your chosen brokerDeposits, withdrawals and your balance stay here, between you and your broker.
Your money stays at your broker
Deposits, withdrawals and your balance stay between you and the broker you chose. PipLoop doesn't receive, hold or move money, and it gives no signals or investment advice.
In MT5, an EA can only place, change and close trades. It has no way to deposit or withdraw money, so PipLoop can't either.
No broker password, just an EA API key
You connect MT5 with an EA API key, not your broker login. Generate it in Settings → MT5 Connection, copy it once and paste it into the EA's Inputs in MT5. Your broker login and password stay in MT5.
PipLoop issues keys only to accounts with a verified email. The key is shown once and isn't stored in your browser. To check the EA when it connects, PipLoop keeps a one-way digest of the key, never the key itself.
- Once a key has linked an MT5 account, PipLoop rejects it from any other broker account.
- A broker account already linked to another PipLoop user can't be linked to yours.
- PipLoop stores your broker's server and account number, and shows the number only in masked form.
How an order reaches your account
You set your rules or place a trade in PipLoop, on desktop or phone. PipLoop sends the instruction to the EA on your MT5, and the EA places the order with your broker. With no EA running, nothing reaches your account.
The EA talks to PipLoop through the PipLoop relay Service over an encrypted TLS connection, and MT5 checks the server's certificate. The relay and market-data Services have no trading functions.
- Orders need MT5's Algo Trading permission. Turn it off in MT5 and the EA can't trade.
- For now, the PipLoop programs in MT5 run on DEMO accounts only.
Your PipLoop sign-in
Your password is stored only as a salted Argon2id hash. Sign-up and password reset include a security check that blocks automated sign-ups.
After several failed sign-ins, sign-in for that email pauses for a while and PipLoop emails you. Changing your password signs out your other devices and sends you a confirmation email. You can also sign out other devices in Settings → Profile & security.
Copilot AI and your AI key
Copilot AI uses your own API key from the AI provider you choose. PipLoop stores the key encrypted (AES-256-GCM) and never sends it back to your browser: Settings shows only its name and a short hint.
In Settings you can check, replace or revoke a key at any time. When you use Copilot AI, your messages and the chart and account data it reads go to that provider under your key. Conversations are deleted after a set retention period.
What PipLoop stores
PipLoop keeps what its tools need to work, tied to your PipLoop account:
- Your email and password hash.
- Your MT5 account details: broker server, account number, currency, leverage and margin mode.
- What the EA reports: balance, positions, pending orders and closed trades.
- Your work: Journal entries and screenshots, Playbooks, Flows, AutoDrive settings, price alerts and chart layouts.
- Copilot AI conversations and your encrypted AI key.
It never stores your broker password, because it never asks for it. For questions about your data, contact support; the Privacy Policy explains how it's used.
Stop automation or cut access
Switch AutoDrive OFF to pause new automatic entries. Open positions stay managed, and CLOSE ALL closes them. To stop a Flow, click ■ Stop, then choose Stop · keep position or Stop · close all. Stop all on … stops every Flow on an account.
To cut PipLoop off from your MT5 account, remove the EA from its chart. PipLoop then can't see the account or send it orders. To stop all contact, also stop the two PipLoop Services under Navigator → Services in MT5.
If you think someone else has access: change your password, sign out other devices, switch automation off and remove the EA. Then change your broker password at your broker and contact support.
Report a security issue
Found a security problem in PipLoop? Email [email protected] with what you found and the steps to reproduce it. Please don't access other people's data or trade on accounts that aren't yours, and give us time to fix it before you make it public.
Frequently asked questions
No. Your money stays at the broker you chose, and PipLoop never asks for your broker password. You connect MT5 with an EA API key that you paste into the EA, and orders go only through that EA on your own MT5.
No. In MT5, an EA can place, change and close trades, but it has no way to deposit or withdraw money. Deposits and withdrawals happen only at your broker.
On its own, the key doesn't open your broker account: once it has linked your MT5 account, PipLoop rejects it from any other broker account. Still, treat it like a password and keep it out of screenshots. If you think it has leaked, remove the EA from MT5 and contact support.
It's stored only as a salted Argon2id hash. Repeated failed sign-ins pause sign-in for that email and send you an email, and every password change signs out your other devices and is confirmed by email.
Encrypted on PipLoop's server. It's never sent back to your browser; Settings shows only its name and a short hint. You can check, replace or revoke it at any time.