Tradovate '2FA Enabled, Log In From New Machine'
Tradovate paused your login because two-factor authentication is on and it doesn't recognize this device yet. Here's how to approve the machine from the emailed link or the My Devices panel and get back to trading.
You sit down at a new laptop, open a fresh browser, or connect through TradingView, and instead of your charts you hit a wall: “You have 2FA enabled and log in from a new machine.” It's one of the most common Tradovate login stops in 2026, and it isn't a bug, it's two-factor authentication doing exactly what it's supposed to. The problem is that until you approve the new device, the session stays locked and nothing can route, which is the last thing you want while you're managing a live position. The same root cause can also surface as an “Access is denied” rejection when an API or third-party connection reaches for a live account. The fix is almost always a single click inside an email Tradovate already sent you. Below is how to approve the device, work the My Devices panel, and set up automation like PickMyTrade so an approved, stable connection keeps routing your trades without re-triggering this prompt every time you log in.
Quick Checklist for the 2FA New-Machine Error
- Open your email. Look in the inbox tied to your Tradovate account for a device-login notification and click Approve.
- Check spam/junk. Approval emails land in spam or Promotions constantly; search for “Tradovate” if it isn't in your inbox.
- Use the right address. Approve from the exact email address on your Tradovate account, not a forwarded or alternate one.
- No email? Use My Devices. In Tradovate web, open Application Settings > My Devices, find the Pending device, and click Forget to trigger a fresh approve/deny email.
- Remember: live is strict. Live accounts won't let a new device log in until it's approved; demo accounts are usually lenient.
- Still blocked? Contact Tradovate support to approve the device manually, then retry the login.
What “You Have 2FA Enabled and Log In From a New Machine” Means
The message means two things are true at once: two-factor authentication is switched on for your Tradovate account, and you're signing in from a device Tradovate doesn't yet recognize. “New machine” is broader than most traders assume, a new computer, a different browser, a reinstalled desktop app, cleared cookies, a new IP, or a VPN can all read as an unrecognized device, because the stored device identifier no longer matches.
When Tradovate sees an unrecognized device on a 2FA-protected account, it pauses the login and fires an approval email to the address on file. That email lets you Approve or Deny access from the device, and until you approve it, the session stays blocked. Live accounts enforce this hard, Tradovate won't let a new device log in, even with limited functionality, until the device is approved. Demo and simulation accounts are generally more forgiving, which is exactly why a setup that works in demo falls over the instant you aim it at a live account.
Connect through TradingView and the error shows up on TradingView's side as “You have 2FA enabled and log in from a new machine,” because TradingView's connection to your account hasn't been approved yet. Connect through the API or a bridge and the same unapproved-device condition usually reads as “Access is denied” on live order placement. Different wording, identical fix: approve the device.
Top Causes of the 2FA New-Machine Block
1. You logged in from a genuinely new or changed device
A new PC, phone, tablet, or a freshly installed Tradovate desktop app has no stored device approval, so 2FA challenges it the first time it connects.
2. Your device “changed” without you realizing
Switching browsers, updating or reinstalling the app, clearing cookies, or connecting through a new network or VPN can invalidate the previously stored device identifier. Tradovate then treats a familiar computer as brand new.
3. The approval email was never actioned
The email went out, but it's sitting unopened in spam, got deleted, or landed at an address you no longer check. No approval click means the device stays blocked.
4. You're on a live account, which enforces approval strictly
Live accounts hard-block unapproved devices. If your code, TradingView layout, or platform runs fine in demo but fails on live, this device-approval requirement is the usual culprit.
5. The device shows “Pending” and was never approved
In Application Settings > My Devices, a device that attempted access but was never approved shows a Pending status. Until it's approved, that machine can't complete login.
How to Fix the 2FA New-Machine Error: Step-by-Step
Fixing It via the Approval Email (Fastest Path)
Open the right inbox
Open the inbox for the address tied to your Tradovate account.
Find the device-login notification
Find the device-login notification from Tradovate. If it isn't in your inbox, check Spam/Junk and any Promotions tab, and search for “Tradovate.”
Click Approve, not Deny
Open the email and click Approve, do not click Deny, since that permanently blocks the device for this attempt.
Log in again
Go back to TradingView, the desktop app, or the web trader and log in again. The session should now complete.
Fixing It From Application Settings > My Devices
If no email arrived, or you'd rather manage devices directly, work the My Devices panel from a machine that already logs in cleanly:
Log in on an approved device
Log in to Tradovate web (or the trader app) on a device that's already approved.
Open My Devices
Open Application Settings and select My Devices. Each device lists its Device name, IP Address, Last location, Last Login Time, and Last App.
Forget the pending device
Find the new machine showing a Pending status and click Forget. Forgetting a pending device generates a fresh Approve / Deny email the next time that device attempts a login.
Approve the fresh email
Trigger the login again from the new device, then open the new email and click Approve.
If No Email Ever Arrives or the Device Stays Denied
Confirm the account email
Confirm the email address on your Tradovate account is correct and one you can actually open. A wrong or outdated address is the most common reason the approval email “never comes.”
Allow-list Tradovate as a sender
Add Tradovate as a trusted sender and allow-list it so future approval emails don't get filtered.
Ask support to approve manually
Contact Tradovate customer support and ask them to approve the device on their side, this is the recommended fallback when you simply can't receive the approval email.
Send a persistent device ID (API/bridge)
For API or bridge connections hitting a live account, make sure your integration sends a persistent device ID, a stable identifier that doesn't change on every request. Approve the device once and it sticks; a device ID that rotates each call keeps re-triggering the challenge. Confirm the exact requirement in the current Tradovate API documentation, since API behavior evolves.
Once a device is approved, My Devices lists it as approved with a Remove Access option, use that later to revoke a device you no longer trust, such as a shared or public computer.
Troubleshooting Table
| Error / State | What it means | Fix |
|---|---|---|
| You have 2FA enabled and log in from a new machine | 2FA is on and this device isn't approved yet | Open the emailed device notice and click Approve, then log in again |
| Access is denied (live API/bridge) | Unapproved device on a live account | Approve the emailed device ID; supply a persistent device ID from your integration |
| Works in demo, fails on live | Live enforces device approval strictly; demo is lenient | Approve the new device for the live account specifically |
| No approval email received | Email in spam, filtered, or sent to the wrong address | Check spam, verify the account email, then contact support to approve manually |
| Device shows “Pending” in My Devices | Device attempted access but was never approved | Click Forget to regenerate the email, then Approve |
| Prompt returns on every login | Device identifier keeps changing (new browser, cleared cookies, rotating device ID) | Log in from a consistent device/connection or send a stable device ID |
Prevent This with PickMyTrade
When you're automating from TradingView, part of what makes the new-machine prompt so disruptive is that alerts fire from wherever you happen to be, a new browser, a phone, a fresh VPS, and each new origin can re-trigger 2FA. PickMyTrade routes your TradingView alerts to Tradovate over a single, consistent connection, so once your account is linked you're not re-approving a “new machine” every time you switch laptops or networks.
- Stable, consistent routing, alerts flow through one steady PickMyTrade connection instead of a rotating set of devices, so you approve your setup once and keep trading.
- Set-once connection, link your Tradovate account a single time; there's no browser session to babysit on every device you own.
- Live and demo aware, route to the exact account you intend, live or demo, which matters because live is where device approval is enforced hardest.
- Multi-account sync, mirror the same alert across multiple Tradovate accounts from one place, without logging each one in from a new machine.
Link Alerts Today, Trade Rejection-Free
PickMyTrade holds one stable, approved connection to Tradovate, so switching devices or networks doesn't keep re-triggering the 2FA new-machine challenge.
Start Your Free 5-Day TrialFrequently Asked Questions
Two-factor authentication is on for your account and you're signing in from a device Tradovate doesn't recognize yet. It pauses the login and emails you to approve or deny the new device before letting the session through.
It goes to the exact email address on your Tradovate account. Check the inbox first, then Spam/Junk and any Promotions tab, and search for “Tradovate.” A wrong or outdated account email is the number-one reason the approval message seems to never arrive.
Deny blocks that device for the attempt. Open Application Settings > My Devices from a device that already works, click Forget on the blocked machine to regenerate a fresh approve/deny email, then approve it on the next login attempt.
Live accounts enforce device approval strictly, so an unapproved device can't log in at all. Demo and simulation accounts are far more lenient, which is why the same device or code often runs fine in demo and fails the moment you point it at live.
Usually yes. On a live account the unapproved-device rule blocks order access until you approve the device from the email. Sending a persistent device ID and approving it once clears it; a device ID that changes on every request will keep failing.
Log in from a consistent device and connection, avoid clearing cookies or reinstalling the app unnecessarily, and for integrations send a stable device ID. Every genuinely new origin reads as a new machine to Tradovate.
Confirm the email address on your Tradovate profile is correct and one you can actually access, allow-list Tradovate as a sender, and contact Tradovate customer support to approve the device manually from their side.
You can, and some traders do to remove the email step, but it meaningfully weakens security on a funded live account. Approving the device once, or routing through a stable automated connection, is the safer choice. Keep 2FA on.
This guide is for educational and informational purposes only and is not financial, investment, or trading advice. Trading futures and other leveraged products carries a substantial risk of loss and is not suitable for every investor. PickMyTrade is an independent third-party automation platform and is not affiliated with, endorsed by, or sponsored by Tradovate, Inc. or Bookmap. All related names, logos, and trademarks are the property of their respective owners. Platform features and steps change over time, so always confirm the current process in the official platform documentation before acting.