The official XTB login takes you to one of two separate destinations — xStation 5 (xstation5.xtb.com) for trading, or the Client Office (co.xtb.com) for account management — and both use the same email and password. Unlike brokers with dual-password systems, XTB keeps things simple: one set of credentials works everywhere, including the mobile app. Below, we cover every login method step by step, how to fix the most common XTB login problems, and how to set up the mandatory two-factor authentication that XTB now requires for all accounts.
How to Login to XTB
XTB has two login destinations that serve different purposes — xStation 5 for trading and the Client Office for account management, because XTB separates your trading platform from your administrative portal. Both use the same email and password, but knowing which one to go to prevents the most common source of confusion for new XTB users.
XTB uses a single password across everything — xStation 5 (web and mobile), the Client Office, and all trading accounts under your profile. You do not have separate trading and account passwords like you do with Exness or Deriv. This makes login simpler, but it also means a password reset changes access to all your accounts at once.
xStation 5 Web Login (Trading Platform)
- Open your browser and go to xstation5.xtb.com. Verify the URL shows “xstation5.xtb.com” and the padlock icon before entering any credentials. The login page may include a branch parameter (e.g.,
?branch=intfor international clients or?branch=ukfor UK clients) — make sure the branch matches your account’s entity. - Enter your registered email address and your password — the same credentials you used when you opened your XTB account.
- Complete the 2FA verification — enter the code from your authenticator app, SMS, or email, depending on which method you set up. If you’ve added this device to your trusted devices list, you may skip this step.
- You are now in xStation 5 — XTB’s proprietary trading platform where you can trade stocks, ETFs, forex, indices, commodities, and CFDs. If you have multiple trading accounts, use the dropdown in the upper right corner to switch between them.
XTB Mobile App Login
- Open the XTB Online Investing app on your phone. If you haven’t installed it yet, download it from Google Play or App Store.
- Enter your email and password — the same credentials you use on xStation 5 web and the Client Office.
- Complete 2FA verification if the device is not trusted. The app will prompt you to add it to your trusted devices list (up to 10 devices) so you can skip 2FA on future logins.
- After your first successful login, set up biometric authentication — go to your Profile (top left) → Security → enable fingerprint or Face ID for faster access. You can also set up a PIN code as an alternative.
To access your demo account from the mobile app, tap the Profile icon (top left), scroll down, and select “Switch to DEMO account.” To switch between multiple real accounts, tap the balance displayed at the top of the screen — your accounts appear in a horizontal list you can swipe through.
Client Office Login (Account Management)
- Go to co.xtb.com in your browser. The Client Office is XTB’s account management portal — separate from the trading platform.
- Enter your email and password — the same credentials you use for xStation 5.
- You are now in the Client Office, where you can manage deposits and withdrawals, update personal details, register bank accounts, add additional trading accounts (up to 4), submit complaints, and adjust notification settings.
You cannot access the Client Office from the XTB mobile app — it is a web-only portal. However, the most common Client Office functions (deposits, withdrawals, adding accounts, updating personal data) are available directly within the mobile app, so most traders will rarely need to visit co.xtb.com separately.
Demo Account Login
Demo and real accounts use the same login credentials. Once logged in to xStation 5 (web or mobile), your demo account appears alongside your real accounts in the account dropdown. Select it to switch — no separate login required. On the mobile app, tap Profile → “Switch to DEMO account.”
Demo account rules differ by entity: if you are under the international entity (XTB International, Belize), your demo account is permanent and does not expire. If you are under the UK entity (XTB Limited, FCA), your demo expires after 30 days — but you can open unlimited new demos or contact support to request a non-expiring demo.
Logging in to XTB takes under 30 seconds if you use the right URL for the right purpose. The key thing to remember: xStation 5 is for trading, the Client Office is for account management, and both use the same email and password.
Common XTB Login Problems
Most XTB login problems come from using the wrong login URL or from changes XTB made in 2024–2025, because XTB removed MetaTrader 4 support in April 2024 and made two-factor authentication mandatory after a cybersecurity incident in 2025 — both changes created new failure points that didn’t exist before.
Wrong Branch URL
XTB uses branch-specific login URLs. If you go to xStation 5 with the wrong branch parameter, your account may not be found. The branch must match the entity your account is registered under:
| Your Entity | Correct Login URL | Who This Applies To |
|---|---|---|
| XTB International (Belize) | xstation5.xtb.com/?branch=int | African traders, most non-EU countries |
| XTB Limited (UK, FCA) | xstation5.xtb.com/?branch=uk | UK residents |
| XTB S.A. (Poland, KNF) | xstation5.xtb.com (auto-detected) | EU/EEA residents |
If you are unsure which entity you are under, check the welcome email you received when you opened your account — it states the legal entity name. You can also check the footer of co.xtb.com after logging in to the Client Office.
MT4 Login No Longer Works
XTB removed MetaTrader 4 on 19 April 2024. If you are trying to log in to MT4 with your XTB credentials, it will fail — MT4 is no longer supported. All existing MT4 accounts were automatically migrated to xStation 5. XTB does not support MetaTrader 4 or MetaTrader 5; the only trading platform is xStation 5 (web and mobile app). If you previously used MT4, go to xstation5.xtb.com and log in with the same email and password.
Password Reset Affects All Accounts
When you reset your XTB password, it changes for every trading account under your profile simultaneously. XTB does not support per-account passwords — all accounts (real and demo) share one set of credentials. After a password reset, you are also logged out from all devices and need to re-authenticate everywhere, including re-entering 2FA on non-trusted devices.
Demo Account Expired (UK Entity Only)
If your demo account shows as inactive or inaccessible, and you are under the UK entity (XTB Limited, FCA), your demo has expired — UK demos last 30 days. You can open a new demo from the XTB mobile app or contact support to request a permanent demo. International entity (Belize) demos do not expire.
2FA Locked Out
If you lose access to your authenticator app or change your phone number and can no longer receive SMS codes, you cannot bypass 2FA yourself. Contact XTB support to regain access — you will need to verify your identity. To prevent this: when setting up an authenticator app, save the backup key in a secure location so you can restore it on a new phone.
How to Reset Your XTB Password
- Go to the xStation 5 login page (xstation5.xtb.com) or the Client Office login page (co.xtb.com).
- Click “Forgot password?” — the link is below the login button. This takes you to co.xtb.com/#/password-recovery.
- Enter your registered email address and click “Reset password.”
- Check your email for the password reset link and follow the instructions to set a new password.
- Log back in with your new password on all devices. Remember: the new password applies to all your trading accounts and the Client Office.
Most XTB login problems resolve by checking two things: that you are using the correct branch URL for your entity, and that you have access to your 2FA method. If your issue is not covered above, contact XTB support — international clients can reach them at sales_int@xtb.com.
How to Protect Your XTB Account
XTB is regulated by 11 authorities including the FCA (522157), KNF, CySEC (169/12), and DFSA, which means your account is protected by strict data security standards — but the strongest protection is the two-factor authentication that XTB now requires for all accounts, introduced after a cybersecurity incident in mid-2025 where a client without 2FA lost approximately PLN 150,000 (~$38,000).
Enable Two-Factor Authentication (2FA)
2FA is mandatory for all XTB accounts. XTB supports three verification methods:
| Method | How It Works | Recommendation |
|---|---|---|
| Authenticator App (TOTP) | Google Authenticator, Microsoft Authenticator, or Apple Passwords generates a 6-digit code on your phone — no network required | Recommended. Works offline, immune to SIM-swap attacks and SMS delays |
| SMS Code | XTB sends a verification code to your registered phone number via SMS | Convenient, but depends on mobile network coverage — codes can be delayed or fail in some regions |
| Email Code | XTB sends a verification code to your registered email address | Reliable if you have consistent email access, but slower than TOTP |
To set up or change your 2FA method: on the mobile app, go to Profile (top left) → Security → Two-Factor Authentication. On xStation 5 web, click the three-line menu (top right) → Settings → Security → Two-factor authentication. If using an authenticator app, scan the QR code and save the backup key — you will need it if you lose your phone.
Manage Trusted Devices
After enabling 2FA, XTB allows you to add up to 10 trusted devices. On the first login from a new device, the app asks if you want to trust it — trusted devices skip the 2FA step on subsequent logins. You can view and remove trusted devices from Security settings at any time. Remove any device you no longer use or recognise.
Emergency Lock
XTB’s Emergency Lock is a self-service panic button that instantly freezes your account — blocking all withdrawals, trades, and eWallet transactions. If you suspect unauthorized access, activate it immediately from the mobile app: Profile → Security → Emergency Lock.
Once activated, Emergency Lock can only be removed through video verification — XTB requires access to your camera and microphone to confirm your identity. This is an intentional security measure, but it means unlocking is not instant. Do not activate Emergency Lock casually; use it only when you genuinely suspect your account has been compromised.
Phishing Awareness
The official XTB login pages are xstation5.xtb.com (trading platform) and co.xtb.com (Client Office) — always type these URLs manually or use bookmarks. XTB will never ask for your password via email, social media, or phone. Search results for “XTB login” sometimes include paid ads from phishing sites that mimic the real login page — verify the padlock icon and exact domain before entering credentials.
A password manager (Bitwarden, 1Password, or your browser’s built-in manager) stores your XTB credentials securely and auto-fills them only on the correct domain. This means it will refuse to fill your password on a phishing site with a different URL — making it the single most effective protection against phishing.
Set up 2FA with an authenticator app, save your backup key, and bookmark both xstation5.xtb.com and co.xtb.com. These three steps take five minutes and protect your account against the most common attack vectors — password theft, phishing, and lockout without a recovery path.
Conclusion
Logging in to XTB is straightforward once you know the two destinations: xStation 5 at xstation5.xtb.com for trading, and the Client Office at co.xtb.com for account management. Both use the same email and password, and the mobile app gives you access to trading, demo switching, and most account management functions with biometric login. See our XTB app download guide for instructions on getting xStation 5 on every device.
The main things that trip up XTB users are the branch-specific URLs (make sure you use the right branch for your entity), the MT4 removal (xStation 5 is now the only platform), and the mandatory 2FA (set up an authenticator app and save the backup key). All three are one-time setup issues that do not recur once resolved.
For the full picture on XTB — regulation, fees, the FSCA entity story, and our TIC Score — read our XTB Review.
Login to XTB or Open a New Account
Already have an account? Log in now. New to XTB? There is no minimum deposit requirement — see our XTB deposit guide to get started.
Login to XTB → Open XTB Account74% of retail investor accounts lose money trading CFDs with this provider.
Frequently Asked Questions
XTB has two official login URLs: xstation5.xtb.com for the xStation 5 trading platform, and co.xtb.com for the Client Office (account management). Always type these directly into your browser or use saved bookmarks. Do not click login links from emails or social media — go to the sites directly to avoid phishing pages. International clients should use xstation5.xtb.com/?branch=int.
xStation 5 (xstation5.xtb.com) is the trading platform — where you buy and sell stocks, ETFs, forex, and CFDs. The Client Office (co.xtb.com) is the account management portal — where you deposit and withdraw funds, update personal details, add additional trading accounts, and submit complaints. Both use the same email and password, but serve different functions.
Go to xstation5.xtb.com or co.xtb.com, click “Forgot password?” below the login button, enter your registered email, and follow the reset link sent to your inbox. The direct URL for password recovery is co.xtb.com/#/password-recovery. Important: resetting your password changes it for all trading accounts under your profile and logs you out from all devices.
Yes, you can be logged in on multiple devices simultaneously — for example, xStation 5 web on your computer and the XTB mobile app on your phone. Your accounts, balances, and positions sync across all devices in real time. Each device may need to complete 2FA verification on first login unless you add it to your trusted devices list (up to 10 trusted devices allowed).
XTB allows up to 4 real trading accounts under one profile. On the xStation 5 web platform, use the dropdown menu in the upper right corner to switch between accounts. On the mobile app, tap the balance at the top of the screen and swipe through your accounts. Switching is instant — no re-login required. You cannot assign custom names to individual accounts; they appear as numbered accounts.
No. XTB removed MetaTrader 4 support on 19 April 2024 and has never offered MetaTrader 5. The only trading platform is xStation 5, available as a web app (no download required) and a mobile app for iOS and Android. If you previously used MT4 with XTB, your account was automatically migrated to xStation 5 — log in at xstation5.xtb.com with the same email and password.
Log in to xStation 5 or the mobile app with your normal email and password — demo accounts appear alongside your real accounts in the account dropdown. On the mobile app, tap Profile (top left) → “Switch to DEMO account.” No separate credentials are needed. International entity (Belize) demo accounts do not expire; UK entity demos expire after 30 days, but you can open unlimited new ones.