How to log in to IQ Option? Access guide 2026

Where can I log in from?

From three different places: the official page opened in any browser, the mobile application for Android or iPhone, and the desktop program for Windows or macOS. The credentials are the same in all three.

IQ Option does not create one account per device. You open the account once and that same pair of email and password lets you into the browser on your computer, the application on your phone and the program installed on the desktop. The real balance and the practice balance travel with the account, not with the device, so you can start a session on the work computer and continue it on the phone without moving anything.

The sign-in sequence is practically identical on all three routes. It is worth learning once and applying wherever it belongs:

1. Open the official route. Type the operator's address into the browser bar yourself, or open the application you already installed. Avoid arriving via a link in an email or a message: that is the favourite entrance of cloned pages.
2. Choose the sign-in option. Registration and access sit side by side on the opening screen. Look for the log-in button, not the create-account one; if you get it wrong, the platform will tell you that email already exists.
3. Type the registered email. It has to be exactly the one you signed up with, with the same domain ending. A similar email creates a new, empty account; it does not recover yours.
4. Type the password. Use the eye icon to check it before confirming. Most access rejections are one mistyped character or caps lock left on.
5. Confirm the second factor if your account has one active. If you switched on an additional verification, the platform will ask for the code at this point. Have it to hand before you start so it does not expire.
6. Check which balance you land on. When the platform loads, look at the account selector at the top. That is where real money is told apart from the practice balance, and that two-second check heads off the most expensive mistake of the early days.

Access from the official website

The browser version is the most direct because it requires no installation. It works in up-to-date versions of Chrome, Edge, Firefox and Safari, and it is the route to use when you sign in from a computer that is not yours, because closing the browser leaves no program installed behind you. The trade-off is that it depends entirely on the connection and on the browser itself: an aggressive ad-blocking extension or a profile with a heavily loaded cache can stop the sign-in screen from even drawing.

A detail that saves grief: bookmark the official address the first time you sign in correctly and always use that bookmark. Search engines show third-party adverts on terms like "IQ Option log in", and not all of them lead to the operator's site.

Session in the mobile app

The mobile application exists for both major platforms. On Android it is distributed through Google Play, at a size close to 74 MB and compatibility from Android 7.0, and the operator also keeps an APK file of its own in its download menu, listed for Android 5.1 or above. On iPhone it is downloaded from the App Store, takes up around 163.3 MB and asks for iOS 15 or later. If you do not have it installed yet, the guide to the application for Android and iPhone covers the download.

The advantage of mobile for logging in is that the phone lets you store the credentials in the system keychain and unlock the application with a fingerprint or face, depending on what your model offers. That pairs well with a long password: you do not type it every time, but it stays strong. Its particular risk is equally obvious, which is that a phone without a screen lock turns any open session into an open account for whoever picks the device up.

Signing in from a PC

The desktop program is a separate download. The Windows version weighs around 130 MB and asks for Windows 7 or later; the macOS one is around 163.3 MB and requires macOS 12.0 or above. Always download it from the operator's official download menu and never from a third-party repository, however well known it may look. The download guide for PC and Windows goes through the installation in detail.

For anyone who spends hours in front of the chart, the desktop is usually the more comfortable option: it uses the whole screen, holds several analysis windows at once and does not depend on browser tabs. A practical note about signing in: if the program hangs on the access screen, it is almost always an old version that needs updating, not an incorrect password.

If you do not yet have credentials to type, the logical thing is to start with the practice balance rather than your own money; you can enter the free demo account and go through the same sign-in screen without risking anything.

Choose the route by the use you will put it to: browser for signing in from other people's machines, application for checking positions away from home, and desktop for long analysis sessions.

What data and security do I need?

Only two mandatory details: the registered email and the password. From there, security depends on what you configure in the account settings and on how carefully you manage your devices.

IQ Option's login is deliberately simple, and that simplicity shifts the weight of security onto the user. The platform protects the infrastructure and the payment data — the operator states that it has completed the transition to version 4.x of the PCI DSS standard — but none of that stops someone getting in with a password you reused on another site. The part that falls to you is short and is set up once.

Email and password

The email does two jobs at once: it is your access identifier and it is the channel through which the password is reset. That is why it is worth registering with an address you really control and can reach from your phone, not with a work email you might get cut off from. If one day you lose access to that inbox, recovering the account becomes a much longer errand.

On the password, what works in practice is this:

• Unique to this account. A reused password turns someone else's breach into your problem, and breaches at minor sites happen all the time.
• Long rather than convoluted. A phrase of four apparently meaningless words holds up better than eight characters with symbols, and it is memorable too.
• Kept in a manager. The browser's or the operating system's manager will do; what matters is not writing it down in a phone note or in an email.
• Changed if there was any suspicion. There is no need to rotate it monthly, but do change it as soon as you notice a sign-in you do not recognise or lose a device.

Two-step verification

A second layer of verification is the most rewarding security improvement there is for an account with money in it, because it makes a stolen password no longer enough. The platform handles code flows in its interface, but the operator does not publish a help page documenting the setup step by step; that is why the advice here is conditional: if your account offers it, look for it in the profile's security settings and switch it on before you make your first deposit.

If you do find the option there, bear the following in mind before switching it on. Keep the backup codes the system gives you somewhere other than the phone, because their whole purpose is to rescue you when the phone is not there. And do not change your number or delete the code app without disabling verification first, or you will be locked out of your own account, entirely justifiably.

Logging out on other devices

Open sessions pile up without you noticing: a relative's computer, a browser from a trip, a tablet you no longer use. Each of them is a live entrance to your account. Get into the habit of logging out explicitly when you use a machine that is not yours, rather than just closing the tab, and check the profile's security section now and then to see whether the platform lists the devices with access.

If you suspect someone else has your credentials, the right order is to change the password first and then close the open sessions. Doing it the other way round leaves the intruder inside long enough to get back in. How the money is kept once you are inside is another matter, and we deal with it on the page about account and fund protection.

Set up the unique password and the additional verification before your first deposit: after an incident, any measure is late by definition.

How do I recover access?

With the forgotten-password link on the sign-in screen, which sends a reset email to the registered address. If that email does not arrive or the account is on hold, the route runs through support.

Losing access is inconvenient but rarely serious, because the account does not disappear: it carries on existing with its balance and its history, and the only thing that fails is the key. The standard recovery procedure is settled in minutes as long as you still have the email you registered with.

Resetting the password

The flow is the usual one for any financial service, and it is worth following calmly:

1. On the login screen, choose the forgotten-password option.
2. Type the registered email and confirm the request.
3. Open the message that arrives and click the reset link. These links expire, so use it straight away.
4. Set a new password, different from the previous one and not reused on other services.
5. Go back to the access screen and sign in with the new password. If you had additional verification, it will still be asked for.

A warning that saves a call to support: the reset email frequently lands in the spam folder or the promotions tab. Check there before requesting a second send, because asking for several in a row sometimes invalidates the earlier links and complicates matters.

Confirming the registered email

When the message does not arrive, the most common cause is not a system failure but an address different from the one you remember: the wrong domain, one dot too many, an account created with someone else's email. Before insisting, search your inbox for old messages from the operator, such as the welcome one or the registration confirmation. The address where those emails are is the account address, with no room for argument.

If your email provider filters harshly, mark the address those original messages came from as a trusted sender. It is also worth checking that the inbox is not full, a trivial detail that rejects messages silently.

Blocked account

There are cases where the password is correct and you still cannot get in, because the account is on hold by the operator. It happens, for example, when identity verification was left half finished, when the system detected activity that does not fit your usual pattern, or after a run of failed attempts. Here resetting the password solves nothing, because the problem is not the key but the door.

In that situation you have to write to support from the registered email, explain what happened and provide the documentation they ask for. Have your official identification and your account details to hand. The full detail of why these blocks happen and how they are lifted is on the page about access problems, which is where we diagnose each error one by one.

Before asking for a third reset email, check in your old messages which address you registered with: that is the origin of most recoveries that seem not to work.

Why does my login fail?

Almost always for one of three reasons: mistyped credentials, an obstacle in the browser or the connection, or a session that expired through inactivity. Each has a different signal on screen.

A login failure is rarely a mystery. The platform returns different messages depending on what is happening, and learning to read them saves a lot of time. The table below sums up the most frequent situations and the reasonable first move for each one.

Incorrect credentials

It is the number one cause and the easiest to rule out. The phone keyboard capitalises the first character automatically, password managers sometimes fill in the credential from another site, and a space stuck on the end of the email when you copy it goes unnoticed. Type the email by hand instead of pasting it, reveal the password before confirming, and do not repeat the attempt more than three or four times in a row: strings of failed attempts are exactly what triggers a precautionary hold.

Connection or browser problems

The platform is a heavy application that needs to keep a live data connection open. When sign-in hangs without returning any error, the suspect is usually the machine, not the account. It is worth ruling things out in this order:

• A private window. If it works there, the problem is the cookies or the cache of your usual profile.
• Extensions. Ad and tracker blockers interfere with the resources the platform loads; disable them for this site.
• The network. Corporate networks and some café ones filter financial traffic. Trying on mobile data settles the question in a minute.
• An active VPN. Changing your apparent country during sign-in can trigger additional security checks.
• The application version. Old versions stop talking to the server; update it from the store or from the official menu.

Expired session

Platforms that handle money close inactive sessions on purpose, and that is a security feature, not a defect. If you leave the chart open a whole afternoon without touching anything, it is normal to find yourself back at the sign-in screen. The same happens if you sign in from a new device and the system decides to close the previous session.

What is worth watching closely is a repeated logout every few minutes. That pattern points to blocked cookies, a system clock out of sync, or a battery-saving mode suspending the application in the background. Adjusting any of those three usually settles it with no further errand.

The message on screen tells you where the problem is: if it describes the credentials, the matter is yours; if no message appears at all, look at the browser or the network before the account.

How do I sign in safely?

With a password you use nowhere else, avoiding public networks for trading, and always reaching the platform through an address you type yourself or keep in bookmarks.

Access security is played out almost entirely outside the platform. IQ Option states that it holds client funds in segregated bank accounts, separate from the company's operating resources, and that it completed the transition to the PCI DSS 4.x standard; these are the operator's own statements and they describe its infrastructure. Neither of them protects an account whose password is written down in a phone note.

A strong, unique password

The operating rule is simple: the password for the account where your money is does not get repeated on any other service, full stop. With a password manager the cost of keeping to it is zero, because you do not have to remember it. Without a manager, a long phrase made of words that only mean something to you works well and types quickly.

Add two small habits that pay off handsomely. Change the password as soon as you hear of a breach at any service where you use something similar. And do not share access with anyone, not even a supposed account manager promising to trade on your behalf: besides exposing your money, handing credentials to a third party usually breaks the terms of use and complicates any later complaint.

Avoiding public networks

An open airport or café network is a reasonable place to read the news and a bad one to sign in to an account with a balance. If you have no alternative, use the phone's mobile data, or at least a trusted VPN, and stick to checking rather than trading or withdrawing. Bear in mind that an abrupt change of apparent location can trigger additional checks and ask you for extra verification, which is inconvenient but is exactly what should happen.

• Lock the phone screen with a code, fingerprint or face: it is the last barrier if you lose the device.
• Log out explicitly on any shared machine, instead of just closing the window.
• Keep the system and the application updated; a good share of updates are security patches.
• Be suspicious of any message asking for your credentials, even if it imitates the operator's look. Legitimate support never needs your password.

Using only the official page

The most common fraud around these platforms does not attack the operator's servers: it puts up a visually identical copy of the sign-in screen and waits for someone to type their email and password into it. That is why how you reach the page matters so much. Type the address or use a saved bookmark, and check the padlock and the domain before typing anything. The same applies to downloads: the desktop program and the Android APK file must come from the operator's download menu, never from a third-party mirror, because a modified installer can carry a keylogger inside. The guide to the APK for Android insists on that point for the same reason.

It is also worth remembering who you are dealing with. The Mexican client is served by SKY LADDER LLC, a company registered in Antigua and Barbuda with number ILLC 004; Cypriot licence 247/14 belongs to another entity in the group and covers European Economic Area residents only. IQ Option claims no Mexican licence and no CNBV supervision, something worth being clear about before depositing and which we explain in more detail on the page about its legal status in Mexico. If after reading this you want to take the step, you can open an account with IQ Option and set up security from the first minute.

Remember, finally, that trading CFDs and options carries a high risk of loss and that the operator warns of it in its own terms: do not commit funds you cannot afford to lose.

Reaching the platform through an address you typed yourself neutralises most credential theft, because the fraudulent copy only works if you click their link.