Security
Your keys, protected — and we say exactly how.
Connecting a brokerage means trusting us with sensitive access. We treat that seriously, and we'd rather tell you precisely how it works than hide behind buzzwords.
Encrypted at rest
Your broker keys are encrypted with AES-256-GCM using a dedicated key, separate from everything else. A database leak alone reveals nothing usable.
Never displayed or logged
Once you save them, your keys are never shown back to you, never written to logs, and never sent to your browser again.
Used only by the engine
Keys are decrypted in memory solely to place the trades you've authorized, then dropped. Nothing else in the product reads them.
Revocable instantly
Disconnect in one click to delete your stored keys — or revoke them in your broker's dashboard at any time. You stay in control.
What we can — and can't — see
Here's the honest version, because it matters: an autopilot that places trades for you has to be able to use your credentials at trade time. So while your keys are encrypted and never exposed, we don't claim a "zero-knowledge" system where the keys are mathematically impossible for our servers to read — that wouldn't be true for any tool that trades on your behalf, and we won't tell you otherwise.
What we do guarantee: keys are encrypted at rest, never shown, never logged, used only by the trading engine, and deletable the instant you disconnect. Every trade is recorded in your audit log, and your risk limits and one-tap kill switch apply at all times.
For the strongest possible model, we're rolling out broker OAuth — you authorize through your broker and we hold a scoped, revocable token instead of raw keys. Until that's live for your broker, encrypted bring-your-own-keys is the secure, standard path.
Tips for extra peace of mind
- Generate a dedicated API key for Autopilot rather than reusing one — you can revoke just that key later without affecting anything else.
- Disconnecting in Brokerage deletes your stored keys immediately.
- Start on paper. Connect a live account only when you're ready — and you can pause everything in one tap.
Options trading involves substantial risk of loss and is not suitable for every investor. Autopilot Options does not guarantee profits or prevent losses.