BorderFolio/Freedom24 portfolio tracker/API connection
Connecting Freedom24 with read-only API keys
Last reviewed 9 September 2026
Freedom24 lets you generate an API key pair in your own cabinet. BorderFolio uses that pair — and nothing else — to read the account: current positions and executed trades, signed per request, no login session ever established. Paste the keys once and the portfolio maintains itself: first sync in under a minute, a refresh every night, and a manual sync button for whenever you want the latest state now.
The four steps
- Generate the pair. In the Freedom24 cabinet, open the API settings and create a new public/secret key pair. Make one specifically for BorderFolio — a dedicated pair is trivial to revoke without touching anything else you use.
- Paste it in. In BorderFolio, choose Connect broker, pick Freedom24, paste both keys and pick the currency the portfolio reports in — foreign holdings convert to it.
- The pair is proven, then sealed. One read-only positions call checks the keys actually work before anything is saved. A rejected pair produces a clear error, not a stored connection that fails silently on every sync. The accepted secret is encrypted at rest.
- First sync, then nightly. The first pull starts immediately and usually finishes in under a minute. From then on the portfolio refreshes every night on its own.
What each sync reads
- Current positions — instrument, name, ISIN, quantity, currency, and the broker's own average purchase price, fractional quantities included. Tickers arrive with Freedom24's market suffix ("AAPL.US", "VWCE.EU") and are resolved to the right listing automatically.
- Trade history — every executed buy and sell with price, the commission charged on that trade, currency and date. Each buy is stored as a dated contribution; sells reduce the position from their date.
The trade history is the point. A tracker that only mirrors today's positions can never say how much of the balance is money you put in — the dated buys are what make the contribution-vs-growth split a running figure instead of a spreadsheet reconstruction.
Why this is safer than it sounds
"Connect your broker" usually means handing over a password or routing through an aggregation service. This is neither:
- No password, no session. Every request is individually signed with your key pair using the scheme Freedom24's own API defines. BorderFolio never sees your login and never holds a session into the cabinet.
- Two calls exist, both reads. The integration implements current positions and trades history — and nothing else. There is no code path that places, modifies or cancels an order; the read-only line is drawn in the integration's interface itself.
- The secret is sealed. Stored encrypted, decrypted only for the moment a request is signed, never written to a log.
- You hold the off switch. Revoking the pair in the cabinet kills the connection immediately, whatever happens anywhere else. The next sync detects it and asks for new keys instead of retrying forever — the portfolio and its history stay intact either way.
The broader account of what is stored and who can see it is on the security page. And if even revocable keys are more than you want to share, the broker report import and manual entry build the same portfolio with no connection at all.
What the connection does not do
- No trading, no withdrawals, no account changes. Read-only means the account cannot be touched, only described.
- No real-time quotes. Nightly plus on-demand is a deliberate cadence for a long-term tracker; the Freedom24 app is the right tool for watching the market move.
- No other Freedom Finance entities. The connection is built for Freedom24 accounts. Other Freedom Finance brands are covered by statement import instead.