iTrustCapital Login — Securely Access Your Crypto IRA & Precious Metals Account

Signing in: web and mobile (step-by-step)

Whether you use the web dashboard or the mobile app, follow these steps to reduce risk when signing in.

Web (desktop)

1. Open a current browser and type https://www.itrustcapital.com (or use a trusted bookmark). Do not follow unknown email links to sign in.
2. Click Sign In, enter your registered email and your password, and submit.
3. Complete multi-factor authentication (if enabled). If prompted to confirm a device or session, review the details carefully.
4. After signing in, go to Account → Security and verify recent sessions and devices for anything unfamiliar.

Mobile (iOS & Android)

1. Download the official iTrustCapital app only from the Apple App Store or Google Play — confirm the developer name.
2. Open the app, sign in, and complete 2FA if prompted.
3. Enable biometric unlock (Face ID / Touch ID) for convenience on that device — this is device-level and complements account MFA.

If you must sign in on a public network, use a reputable VPN and avoid making withdrawal or sensitive account changes until you’re back on a private network.

Multi-factor authentication (MFA): recommended options

MFA prevents many common attacks that rely solely on compromised passwords. Choose the strongest method you can use reliably and keep backups.

Enabling MFA

1. Sign in → Account Settings → Security → Enable 2FA.
2. Pick your method, scan the QR code (for authenticator apps), or register your hardware key when prompted.
3. Store recovery/backup codes in a secure offline place and optionally in an encrypted password manager.

Passwords & device hygiene

Strong passwords plus healthy device practices form the baseline of security.

• Use a long, unique password for iTrustCapital and store it in a reputable password manager (Bitwarden, 1Password, etc.).
• Enable automatic OS and browser updates so security patches are applied promptly.
• Limit browser extensions — remove untrusted or unneeded ones to reduce attack surface.
• Use disk encryption and a secure screen lock on laptops and phones.

Account recovery — plan and practice

Recovery processes are deliberately strict to protect funds. Preparing ahead reduces stress and downtime.

Forgot password flow

1. From the sign-in page click Forgot password? and enter your registered email.
2. Open the reset link in your email (confirm the sender and link) and follow the instructions to set a new password.
3. After resetting, re-enable 2FA and verify account settings and recent activity.

Lost 2FA device

Use saved backup codes if available. If you lack backups, open a verified support ticket with iTrustCapital and follow the identity verification procedures (photo ID, account transaction history, etc.). These checks protect your account from social engineers.

How login ties to custody of crypto & precious metals

iTrustCapital coordinates retirement accounts that may hold cryptocurrencies and allocated precious metals. Understanding how login access connects to custody helps with planning and risk management.

Crypto in IRAs

• Digital assets in IRAs are typically held by a qualified custodian; iTrustCapital provides the trading interface while custody and regulatory compliance are handled by custodian partners.
• Transfers from IRA custody follow custodial procedures and may require additional verification and paperwork.

Precious metals

• Allocated metals are stored in approved depositories; requests for physical delivery involve fees, documentation, and IRA compliance checks.
• Because metals and crypto have different settlement flows, treat delivery or transfer requests as high-security operations with multi-step verification.

Withdrawal & transfer protections

Withdrawals are the most sensitive actions — combine platform controls with disciplined procedures to minimize mistakes and fraud.

• Address whitelisting: where supported, limit withdrawals to pre-approved addresses only.
• Manual approvals: require additional confirmation for large or uncommon transfers.
• Test transfers: always send a small test amount when sending to a new crypto address.
• Enable notifications: push and email alerts help you detect unexpected withdrawals quickly.

APIs & third-party integrations — treat them as high-value credentials

If you use APIs or connect third-party services (tax tools, portfolio trackers), secure those credentials like you would your main login.

API best practices

• Create separate API keys per integration and grant least privilege (read-only where possible).
• Store secrets in an encrypted vault or password manager; do not place keys in source code or shared documents.
• Use IP allowlists for server-side automation when supported and rotate keys periodically.
• Revoke any key you no longer use immediately.

Phishing & social engineering — quick detection checklist

Phishing is the most common route attackers use to get credentials. These habits help you spot and avoid scams.

• Pause before clicking any urgent link. Attackers rely on pressure.
• Verify sender domains carefully — small misspellings or different top-level domains are common signs of fake emails.
• Never share passwords, 2FA codes, or recovery links by email or chat; legitimate support will not ask for them.
• If contacted by phone, hang up and call the official number listed on iTrustCapital’s verified site.

Troubleshooting common login problems

“Invalid email or password”

• Check Caps Lock, keyboard layout, and auto-fill entries from your password manager.
• Use the Forgot password? flow if needed and follow the email link carefully (verify sender).

2FA codes failing

• Ensure the authenticator app’s device clock is set to automatic (network) time — TOTP requires accurate clocks.
• Enter the newest code and avoid stale codes; use backup codes if available.

App or browser errors

• Clear cache and cookies or try a private/incognito window to eliminate session issues.
• Update or reinstall the mobile app from the official store if errors persist.

Everyday security checklist — habits that stick

Security is manageable when you adopt a few repeatable habits. Build these into your routine.

• Use a password manager and unique, complex passwords for every financial account.
• Enable strong 2FA (authenticator app or hardware key) and save recovery codes securely.
• Monthly: review account sessions, connected apps, and API keys; revoke anything unused.
• Keep a minimal working balance on the platform and consider cold storage or hardware wallets for long-term holdings.
• When interacting with external addresses or delivery partners, perform small test actions first.

Frequently asked questions

Will iTrustCapital ever ask for my password or 2FA codes?

No. Official support will never request your full password, one-time authentication codes, or seed phrases via unsolicited email or phone. Treat any such request as a scam and report it immediately.

What if I lose access to my email?

If your account email is compromised or inaccessible, contact iTrustCapital support immediately and follow their verified recovery and identity verification procedures. Maintaining up-to-date contact details reduces recovery friction.

Are there special rules for metal delivery from an IRA?

Yes — physical delivery requests follow custodial and IRA rules. There are fees, paperwork, and tax considerations. Plan ahead and consult the iTrustCapital help center and a tax advisor before requesting delivery.

Next steps

Protect your retirement assets by enabling strong authentication today, storing recovery materials securely, and adopting a monthly security review. When in doubt, use iTrustCapital’s official help center and verified support channels.