The awkward ones are answered here too. A page that only handles the easy questions tells you nothing.
One tap closes every open position, cancels every working order, and locks out trading across every account you monitor — from your phone.
It is not a trading tool. It is a kill switch, and the useful comparison is a smoke alarm: you don't buy it hoping to use it. It costs very little, and when you need everything flat, one press does it everywhere at once.
What it does not do is decide anything for you. It has no strategy, no signals and no opinion. It acts when you tell it to, or when an account reaches a daily loss limit you set yourself.
Around the switch: a daily loss limit per account, drawdown alerts and push notifications, a trade journal and an economic calendar — all included in every plan.
Because every trader has a line, and almost nobody can hold it at the moment it matters. The moment you most need to be flat is the moment you are least likely to click through four platforms and do it — and that is before anything has gone wrong technically.
You've always had a rule. You've never had a switch.
It depends on the firm, and you should check yours.
We have written to firms asking for their policy in writing, and we will name the ones that answer. Until a firm has answered, we are not going to tell you it is fine — that is exactly the kind of assurance that costs somebody an account.
What we can tell you is what the software does, which is what the rules are actually about:
Some firms have rules about third-party software touching an account at all, regardless of what it does. If yours does, read them, and ask your firm directly if you are not sure. If they answer in writing, send it to support@masterlockoutsync.com and we will add them to the list.
The useful thing to understand first: your chart is not what we connect to. Your account routes through an infrastructure layer, and your chart is what you look at while it does. Lockout Sync attaches at that routing layer.
That is why the answer is short. Keep your charts. We connect underneath them. Quantower, ATAS, DeepCharts, Tradesea, Sierra Chart, MultiCharts, Bookmap and Jigsaw all keep working exactly as they do now, because we are not in their way.
Today: accounts that route through Tradovate, Rithmic or CTS T4 (simulator accounts, until CTS issues our live license), prop firm or broker. NinjaTrader has owned Tradovate since 2022, and a NinjaTrader account connects through whichever of the two it routes on.
Not yet: CQG, Trading Technologies and ProjectX. The compatibility page lists every firm and broker and where each one stands.
If you are not sure which of those your account uses, your firm can tell you in one email — or send us the firm name and we will find out.
No, and that is the whole point.
Your connections live on our servers, not on your machine. Nothing has to stay running at home, you do not need a VPS, and it makes no difference whether your trading platform is open, closed, frozen or on a laptop that just went flat. If your phone can reach the internet, the switch works.
This is the difference between a kill switch and a script. A script needs the machine that is having the problem to still be working.
Three paid monthly plans: Starter $4.99, Standard $9.99, Pro $19.99. The difference between them is how many accounts you can monitor at once, and you can move between plans at any time. After your first paid month there is also Freemium, a free plan with one monitored account.
If your plan is full, a new connection is refused until you upgrade, switch an account off or remove a connection. A login that carries more accounts than your plan covers is saved with the extra accounts switched off; switched-off accounts are not monitored, not flattened, not locked out and not covered by a daily loss limit.
72 hours free. Card required, nothing charged.
We say the second half plainly because hiding it is what generates the angry email. Your card is attached when you start the trial so the subscription can begin without a second visit, and nothing is charged until the 72 hours are up. The trial is the real product with Starter’s limits — up to three monitored accounts, the lockout, all of it. Not a demo.
One free trial per person, checked by email address and card.
Nobody at FIBORB LLC can see your positions, orders or stored credentials: no screen and no route returns them. The owner has restricted maintenance views of account records (email, plan, sign-up details), support tickets and connection health — never positions, orders or credentials.
Your positions and orders are never written to disk. What the server keeps about you: your encrypted broker credentials, your account record, a sign-in guard, your journal, your support tickets, your language choice, a referral record if you used or shared a code, your Terms acceptance, and the free-trial record described in the Privacy Policy. The journal is one encrypted row per account per trading day, holding that day’s P&L, its closing balance, any note you wrote on that day or week and the day’s trades (time, contract, side, quantity and price), and nothing else. Positions and orders exist in memory while you are connected and are gone when you disconnect. The journal is kept for you alone, encrypted, and deleted with your account.
While you are connected our servers do hold that data in memory, because it is what the app is drawing and what the flatten acts on. There is no way to build this product without that being true, and anyone who says otherwise has not built one.
There is no screen, anywhere, that shows a stored credential. Not to you, not to support, not to anyone. The only connection list the app can ask for comes back with no password field — the code path that would return one does not exist in the product. No screen or route returns a stored credential, to anyone.
Where your broker issues a scoped API credential instead of a full login, use that. It is revocable by you, from your broker, without touching your password. That is what we would rather hold.
Why we hold them at all: a switch that needs you to type a password at the moment you press it is not a switch. The alternative is not a more private product — it is a slower one, and slow is the whole thing this exists to solve.
No. It closes and cancels. There is no code path in the product that opens a position, and no button for it because there is no feature for it.
The complete list of what it can do to your account: close an open position, cancel a working order, and keep new orders off it — for a short cooling-off window after a lockout, or until the next session opens once a daily loss limit you set is reached. Every one of those makes your exposure smaller or unchanged. None of them can make it larger.
This is also the answer to give your firm if they ask what it is.
The honest version, because a reassuring one is worthless.
What an attacker cannot reach: your money. We are not a broker, we hold no funds, and there is no instruction in this product that moves money out of a brokerage account. The worst realistic case is somebody closing your positions or reading what you hold. Bad — and not the same as theft.
What is not there to take: your positions and orders. They are never written to disk. Someone who took the whole machine would find encrypted credentials, account records and an encrypted journal — daily totals, day and week notes and each day’s trades (time, contract, side, quantity and price), per account per trading day.
What happens the moment we know: every stored credential is destroyed. Every session revoked, every cached broker token invalidated — those authenticate with no password, so leaving them would close the door and leave the window open. Your account, your plan and your settings survive. You sign back in and re-add your connections: fifteen minutes for you, and everything for whoever was holding them.
What that cannot do, said plainly: it cannot un-copy something already taken. A wipe shortens the window; it does not rewrite the past. Anyone who tells you their breach plan makes a breach harmless is selling you something.
What we would do besides: tell you. Quickly, in plain language — what was reached and what was not — before anyone else tells you.
What you can do now: where your broker issues a dedicated API credential, use one here rather than your primary login. Revoking it then costs you one form instead of your account.
Only somebody signed in as you. The app has a PIN and fingerprint lock on top of your sign-in, which is worth turning on — a lockout is a deliberate action with real consequences, and it should take more than a borrowed unlocked phone.
Sign-in itself is rate limited, repeated failures escalate, and a suspicious sign-in pattern trips a challenge with a cooldown that survives a server restart.
Accounts you have switched off in the monitored-accounts list are not touched. One prop login commonly carries an evaluation account and a funded account, and switching one off means exactly what it says.
If you do not need the big red button, there is a per-account flatten and a per-connection flatten for the same job at a smaller scope.
There are two layers, and they are different lengths on purpose.
The cooling-off window is short — 70 seconds, during which new orders are refused by the broker on Tradovate and cancelled by our server on Rithmic and CTS T4. It is deliberately not something you can undo instantly.
The lockout state in the app lasts until you release it. There is a Release control, and it works per connection, so a lockout on one connection can be lifted without touching the others.
Yes, you can release it early. A switch that traps you is a different product with different risks — if the market moves against a position you are now unable to manage, a cage is worse than a switch. The friction is real: a confirmation to enter, a deliberate action to leave, and the fact that you have to decide to undo it rather than just drift back in.
One exception: the daily loss limit. When an account reaches the daily loss limit you set, it stays locked until the next session opens (5:00 PM Chicago time), and a locked account cannot be switched off. A change to the limit applies from the next session. Decide the number when you are calm — that is the point of it.
One thing you cannot do is release a lockout by changing your billing plan. A downgrade is refused outright while a lockout is live. A guard you can release from the billing screen is not a guard.
That is the case it exists for.
All three are on one screen, and one press covers all three. Each connection is handled independently — one that is slow to respond does not hold up the other two, and one that fails does not silently take the others down with it. You get a result per connection, so you know which one needs a second look rather than assuming all or nothing.
Nothing changes. The lockout is not running on your phone.
Your phone sent an instruction; the lockout lives on our servers alongside your connections. It stays in force with the phone off, flat, lost, or on airplane mode in a pocket. Positions do not quietly reopen and the cooling-off window does not end early because a screen went dark.
Sign in from any device and you will see the same state and can release it from there.
Straight answer first: if our server is unreachable, the app cannot flatten anything. There is no local fallback and we are not going to invent one — your phone is a control surface, and the broker connections live on our servers. Any vendor’s “works offline” claim on a product shaped like this deserves a hard question.
That is the limit. What is actually done about it is more than that sentence suggests:
And the part that is on you, said plainly because it is true of every single point of failure in a trading setup: keep your platform’s own flatten reachable. This is a second switch. A second switch that is honest about being second is worth more than a first one that lies.
You are told, on that account, immediately. The app reports per-account results, and a rejection is shown as a failure — never rolled into a green summary. A false confirmation is worse than an error, because you act on it.
Rejections happen for reasons usually outside anyone's control: the market is closed, the position is already flat, the broker's own session has dropped, or the broker is refusing everything at that moment. The app retries what is sensible to retry, and if it still cannot get through it says so and leaves the account visibly unresolved.
If a rejection looks wrong to you, send it to support@masterlockoutsync.com with the time and the firm and we will look at what the broker returned.
Before. Accounts approaching their drawdown limit raise an alert, so the app is not purely something you reach for after the fact.
On prop accounts the drawdown figure comes from your broker's own numbers, or from the rule you set where your broker publishes none. For a trailing drawdown, Lockout Sync also tracks the account's high itself, and where its figure and your broker's differ it shows the tighter of the two. A setting you choose can tighten the figure, never loosen it past your broker's. You see the amount remaining and the price level it sits at. If that data cannot be read, the app says so plainly instead of showing a reassuring bar — a drawdown number you cannot trust is worse than no number.
Alerts also arrive as push notifications when the app is closed: a connection that signed out, a broker that stopped answering, a daily loss limit reached.
One per account, filled in from the connection — the only thing you type is a note.
It is encrypted, kept for you alone, can be exported to a backup file on your phone, and is deleted with your account. There is no P&L per trade: working one out needs matched entries and exits and each contract’s point value, and a number we cannot stand behind is worse than none.
Yes, and for a different reason than a prop trader.
A funded trader installs a kill switch because a firm has a rule that will fail them. You do not have that rule. What you have instead is the reason most retail accounts get given back: nobody is going to stop you, so the stopping has to be something you set up in advance, at a calm moment, and can trigger in one tap when you are not calm.
Everything mechanical works identically on a live account: every account on one screen, one-tap close and cancel across all of them, the cooling-off window, per-account and per-connection flatten, accounts you switch off staying untouched, and a daily loss limit you set per account.
Trailing drawdown is a prop firm's rule, not a market mechanic, so on a retail account the drawdown card has much less to tell you.
The number to watch on a live account is your own: the loss you decided in advance was the end of your day. Set it in the app as that account’s daily loss limit. When the day’s loss reaches it, Lockout Sync closes the account’s positions, cancels its orders and keeps it locked until the next session opens. Decide the number when you are calm, because you will not be calm when it matters.
We deliberately do not lead with "amount until liquidated". On most retail accounts liquidation is a long way off, so that figure sits comfortable and green while a month goes back — which makes it worse than useless.
Cancel any time from Account & Plan, or from the billing portal. No email, no retention call, no maze.
You do not have to cancel to remove a credential. Delete a connection in the app whenever you like and the stored record goes with it. Worth knowing before the rest of this answer.
If you do cancel:
To erase everything immediately: Manage → Account & Plan → Delete account, type
DELETE, and confirm with your password, or by signing in again with Google, Facebook
or X. It is also available at
masterlockoutsync.com/delete-account without signing in to the
app.
There is a free tier, it is limited on purpose, and it is not something you can sign up for on day one.
What it does: one monitored account, with per-account flatten still working. What it does not do: LOCKOUT ALL. The lockout is the product, and it is what the subscription pays for.
Your other connections are disabled, not deleted — the credentials stay, you pick which single account stays active, and the rest come straight back if you move to a paid plan again.
When it appears: after you have been on a paid plan for a month. There is nothing to apply for and nobody to email — the option shows up in Account & Plan on its own once your account qualifies. It is deliberately not offered at sign-up or during the trial.
Yes. Sign in on both.
Your connections live in your account on our servers, so a second device shows the same firms, the same accounts and the same lockout state without re-entering credentials. A lockout triggered on one is visible and releasable on the other.
Two things are per-device rather than per-account: the PIN and fingerprint lock and the order you have dragged your cards into. Set those on each device.
Sharing one login with another person is not what this is for — you would both be able to flatten each other's accounts, which is exactly as bad as it sounds.
With an email address and a password, or with Google, Facebook or X. Sign in with Apple is not available yet.
Two-factor sign-in is available on every account, and once it is on it applies to every way in, the Google, Facebook and X buttons included.
The app is on Google Play for Android today. If you are on iOS, tell us at support@masterlockoutsync.com — the volume of that request is what decides when it gets built, and right now it is a real question rather than a promise.
support@masterlockoutsync.com. Include the firm, the account, and the time it happened — with those three things a server-side log can be found; without them it usually cannot.
Lockout Sync