Security & Capital Safeguards
You connect your funded and challenge accounts to protect your hard-earned discipline. Here is the plain-English architecture behind how we isolate your servers, guard your credentials, and protect your capital.
Zero-Withdrawal Access
Trading credentials cannot withdraw or transfer capital. Your funds never leave your broker.
Dedicated IP Isolation
Each trader runs on dedicated, private cloud IP addresses. No shared VPS pools that trigger prop-firm bans.
AES-256 Encryption
All credentials are encrypted at rest with AES-256-GCM. Passwords are write-only and never exposed in logs.
Immutable Audit Trail
Every position closed, drawdown check, and rule lock is timestamped and recorded in an append-only log.
1. Your money stays entirely with your broker
MyPropGuard connects to your MetaTrader 5 account using trading credentials to monitor equity, evaluate your active guardrails, and execute risk-reducing orders.
- No deposit or withdrawal capability: MetaTrader trading APIs have zero access to cashier functions or bank accounts. Neither our system nor any engineer can move money out of your broker account.
- No account ownership changes: Trading credentials cannot change passwords, email addresses, or phone numbers associated with your broker profile.
- Non-custodial: MyPropGuard is not a broker, liquidity provider, or financial custodian. Your funds remain in your broker account at all times.
2. Broker credential security & storage
When you connect your MT5 account, we treat your credentials with zero-trust storage standards:
Credentials are encrypted before touching persistent storage. Decryption keys reside only in ephemeral environment configs.
Our API never exposes your password back to the web client, never logs it, and never includes it in crash dumps or Telegram messages.
3. Private IP allocation & prop-firm anti-ban protection
Many prop firms disqualify accounts if multiple unrelated traders log in from the same shared VPS server or cloud proxy IP.
- Dedicated clean addresses: Active subscribers receive a private cloud IP address dedicated solely to their accounts.
- Consistent device identity: Each monitored terminal maintains stable machine characteristics across reboots so prop firm fraud-detection algorithms see a legitimate, single-user terminal.
- Isolated runtimes: Accounts run in decoupled sandbox processes. An unexpected spike or broker disconnect on one terminal has no impact on other traders.
4. Network security, operations & vulnerability reporting
Our infrastructure is maintained under strict least-privilege standards:
- All network traffic is encrypted via TLS 1.3 with strict HSTS preloading.
- Production infrastructure access requires multi-factor authentication and hardware-backed SSH keys.
- Real-time component health is publicly visible on our status page.
We welcome responsible disclosure from security researchers. Please email security@mypropguard.io with detailed reproduction steps. We acknowledge valid reports within 48 hours and will not pursue legal action against researchers acting in good faith.