A new, simpler way to keep your account secure - Push Approval
Published: Oct 17, 2022
Updated: Oct 17, 2022
We designed this feature to offer the highest level of security without the complexity of traditional authenticator apps, making it easier than ever to protect your assets.
This guide will walk you through what Push Approval is, why it's a major security upgrade, and how you can set it up in just a few simple steps.
Enrolling your device for Push Approval is a simple process that can be done in two ways.
Enroll When You Log In
Update your mobile application to the latest version
Simply enroll your device when prompted upon logging into the QuestMobile or Edge Mobile app.
If you're not ready, you can select "Remind me later," which will delay the next prompt for 90 days.
Enroll in the Security Center.
Update your mobile application to the latest version
From your mobile app:
Navigate to the "Settings" in your account for 2-step verification
Find the Push Approval setting (labeled as the "Push Approval") and toggle it ON. This will enroll the device you are currently using.
Once you're set up, you remain in complete control of your settings.
Push Approval puts the power in your hands. It sends a secure notification directly to your designated Approval Device when a login is attempted. Instead of typing in a code, you simply review the login details on your QuestMobile or Edge Mobile app and tap to approve or deny access.
Here’s a breakdown of its key advantages:
Key Security Advantage | How Does It Protect You? |
Context-Aware Approval | When a login is attempted, the notification you receive shows you critical details like the device, the approximate location on a mini-map, and the time. This context helps you instantly spot a fraudulent attempt. |
Protection from Phishing & Credential Theft | By requiring approval within the trusted environment of your Questrade app, this feature makes it extremely difficult for attackers to trick you into approving a fraudulent login, even if they have stolen your password. Unlike SMS or email codes which can be intercepted or phished, approval happens directly in the secure Questrade app. This creates a barrier that is exceptionally difficult for attackers to bypass, even if they have your password. |
Now, let's look at how this seamless process works when you log in
With Push Approval enabled, your login process becomes both simpler and more secure. Here's what you can expect:
Log in as usual: Enter your username and password on the Questrade website or another device as you normally would.
Receive a notification: A push notification will be sent instantly and exclusively to your one designated Approval Device.
Review the details: Tapping the notification opens a screen in your Questrade app where you can review the critical login details. You need to unlock your phone to check the notification details. You will see:
Device: e.g., Windows 11 Chrome 134
Where: e.g., Near Quebec City, Quebec (includes a mini-map for easy visualization)
When: e.g., Apr 2, 2025 at 1:53 p.m. ET
Approve or Deny: If the details match your login attempt, simply tap Allow. If you don't recognize the activity, tap Don't Allow to immediately block the attempt. You will then be prompted to report the suspicious activity, helping us keep your account secure.
Understanding how it works is easy, and setting it up is just as straightforward.
You can manage your Push Approval preferences easily from the Security Center. Here are the main actions you can take:
Changing your Approval Device: Only one mobile device can be your designated Approval Device at a time.
Disabling Push Approval: If you wish to turn the feature off, you can return to the Security Center at any time and toggle it OFF.
Here are answers to some common questions about the Push Approval feature.
What if I don't receive the push notification?
Make sure you enable push notification of the Questrade App. In addition, "try another way" allows you to use one of your other existing MFA methods, such as SMS or an authenticator app, to log in.
Will my other MFA methods (SMS, Email, etc.) be disabled?
No. You can keep existing MFA channels as fallback options. However, we recommend you to only keep the most secure verification method.
What if I don't use the QuestMobile or Edge Mobile apps?
The Push Approval feature is only available for users of our mobile apps. If you do not use them, your existing login process using other MFA options (like SMS, email, or an authenticator app) will not change.
What happens if I get a new phone?
Simply log in on your new device. You can verify your identity using your old phone or one of your backup methods (like SMS). Once logged in, go to Settings to remove your old device and enroll your new phone.
Protecting your investments from online threats has never been simpler. Enable Push Approval in your security settings today for immediate peace of mind
