Connecting a broker
For two brokers, Freedom24 and Interactive Brokers, Borderfolio can read positions and trades directly with credentials you create at the broker. A connection is optional: statement import covers the same ground for every broker.
How a connection works
You create read-only credentials in the broker's own settings and paste them into Borderfolio, either from the setup screen (Connect your broker) or from Profile & Settings → Connections. The credentials are checked with a read call before they are saved. No broker password is ever asked for, and the integration has no code that could place, change or cancel an order or move money.
Freedom24
- In Freedom24, open Settings → API and create a key pair.
- Grant it read access only.
- Paste the public key and the secret key into Borderfolio. The secret is shown only once at Freedom24, when the pair is created.
Each sync reads your current positions and your trade history; the full history is read, and trades already on record are skipped. More on the Freedom24 connection page.
Interactive Brokers
Interactive Brokers connects through its Flex Web Service: you paste the ID of a Flex Query and a Flex Web Service token, both created in the IBKR portal. Each sync reads complete current holdings and roughly the last 90 days of trades, so import older history from a Flex Query export (see Importing statements). Stocks, ETFs and funds are read; options, futures, warrants, CFDs, bonds and crypto are not. A Flex Query that covers several accounts is refused, so create one per account. IBKR tokens expire after at most a year.
Syncing
Connected portfolios sync once a day. Sync now in Profile & Settings → Connections runs one immediately. Broker syncs do not count towards the monthly import limit. As with a statement, new positions from a sync wait for your confirmation. Connecting a broker as a new portfolio counts towards your plan's portfolio limit.
Revoked keys and disconnecting
If the broker rejects the credentials (because you revoked them or they expired), the connection is marked Re-connect needed and the daily sync stops until you paste new ones. Disconnect deletes the stored credentials and keeps the positions and history already imported. You can also revoke the credentials at the broker at any time, which cuts off access immediately.
How credentials are stored
The secret part of the credentials is encrypted with AES-256-GCM before it is stored, decrypted only to sign a request, and never written to logs. The app shows only a hint of the public key so you can tell connections apart.
Last updated . Describes the app at app.borderfolio.app as built; screenshots are from the sample portfolio. Figures in the app are informational estimates, not tax, legal or investment advice.