Your account stays yours.
Most copy-trading services ask for your trading password. Steps never does. Here is what we can and cannot do with your account, and how we keep it that way.
What we can and cannot do
Steps can only ask the EA in your own terminal to open or close its own trades, inside the limits you set. Everything else stays with you and your broker.
How it is built
Keys that stay in your terminal
The EA proves who it is with a challenge and answer. Its key never travels over the internet, so it cannot be copied in transit.
Signed instructions
Every trade instruction is signed on our risk server. The EA rejects anything that is not signed, has expired or does not match your limits.
Checked twice
Our servers check each trade against your plan and settings, and the EA checks it again: size, stop, price, spread, open positions.
Stopped by default
A new or restarted server opens nothing until it is explicitly switched on. Our team can halt new trades for everyone in about a second.
Released in stages
Every change reaches our own accounts first, then a small share of customers, then everyone, so a mistake stays small.
Two-factor sign-in
Protect your dashboard with an authenticator app. New MT5 terminals connect only with a code you enter while signed in.
What we store about you
Only what the service needs, kept in the EU (Frankfurt). Full details are in the privacy policy.
- Your email, name and country
- Your MT5 account number and broker server, never the password
- The trades the EA reports, so you can see them in your dashboard
- Payments are handled by Stripe; we never see your card number
Keep your side safe too
Only enter codes from your chart
Steps never asks for a connection code by email, chat or phone. If someone asks you for one, do not give it.
Download only from us
Get the EA and installer only from your dashboard. Each download is code-signed and its checksum is shown.
Report a problem
Found a security issue? Write to [email protected]. We answer every report.