Security
What TrueFills can and can’t do with your brokerage
The short answers. Your money stays at your broker the whole time.
Where your password goes
- Yousign in at the broker's own page
- Your brokerpassword stays here
- TrueFillsreceives a reference, never your password
Can TrueFills move money out of my brokerage account?
No. There is no TrueFills balance, and nothing here can withdraw or transfer money. Trades happen inside your own account.
Do you see my broker password?
No. You log in to your broker through SnapTrade, and we only get a reference to the connection. No page here asks for your broker password; if one does, it isn't us. The one exception is for creators whose broker SnapTrade doesn't cover: they can link Alpaca with an API key, which we store encrypted and use only to read their trades.
Can a strategy trade without me saying so?
Not at first. A new connection can only read your account. Trading is a separate switch you turn on yourself, and you can choose to approve every trade.
How much can it spend?
Only the amount you give it, and no single purchase over the cap you set. Sells aren't capped, so it can always close a position. If the price has already moved away, the trade is skipped, not chased.
How do I stop it?
Stop it in your account under Auto-execution, disconnect under Broker, or revoke access at your broker. Any one of them is enough, and revoking at your broker works even if this site is down.
What if someone gets my TrueFills password?
They can’t withdraw anything, since nothing here can. They could change your settings, and start or stop a strategy trading a connected account within limits they choose. Change your password in Settings, which signs out every other device, and revoke any assistant token there you don’t recognize. Two-step sign-in (a code from your phone) isn’t built yet; it is next.
Can someone sign me up for emails?
No. Anyone can type an address into a form, which sends it one email asking to confirm. Alerts and reports only go to an address its owner has confirmed.
How do I know this page is really TrueFills?
Check that the address bar says truefills.com. Your browser connects here encrypted, and no other website can show TrueFills inside its own page to catch what you type.
Spotted a problem?
Email ysaead@truefills.com and a person answers. Think a record was changed? Check it yourself on the verify page.
Trading involves risk of loss, and no security control changes that. Past performance, live or simulated, does not guarantee future results.