How to Revoke a Trading App's Access to Your Brokerage Account

By Sam Davila on 2026-07-10 - 2 min read

If you connected a trading app to your brokerage account and no longer use it, you should revoke its access. With OAuth-connected apps this takes about two minutes and does not require changing your password. Here is exactly where the setting lives and what actually happens when you revoke.

Where to find the setting at major brokers

  • Charles Schwab: log in on the web, then Profile, Security Center, and look for connected or third-party applications.
  • E*TRADE: Settings, Security, then API or connected apps.
  • Interactive Brokers: Client Portal, Settings, User Settings, then look for third-party access or OAuth applications.
  • Robinhood: Account, Settings, Security and Privacy, then Connected Apps.
  • Fidelity: Profile, Security Center, then linked apps and accounts.

The wording shifts as brokers redesign, but it is always in the security or profile area, and it always lists every app you have authorized with a remove or revoke button next to each.

What happens when you revoke

  • The app's access token is invalidated immediately. Its next API call fails.
  • Your password is untouched, because with OAuth the app never had it.
  • Data the app already stored does not vanish. If you want stored data deleted, request it from the app under its privacy policy (GDPR and CCPA both give you that right).

When you should revoke access

  • You stopped using the app. Dormant authorizations are pure risk with zero benefit.
  • The app changed owners or was acquired. New owner, new risk profile.
  • You see API activity you do not recognize in your broker's activity log.
  • The app suffered a breach, even a minor one.

An audit worth doing once a year

Open the connected-apps page at every broker you use and remove everything you do not actively use. Most people find at least one app they forgot about. While you are there, confirm two-factor authentication is on. This whole audit takes ten minutes and closes more real attack surface than most security advice.

If you disconnect a broker from Sentient Logic, we also drop the stored token on our side, and you can revoke from the broker's side at any time as described above. Connections you control and can see are the point of the OAuth model.

Educational content, not financial advice.