Sorry, no chance.

?

Consider what you’re suggesting: you want a mechanism that somehow gets the OTP from the authenticator app to IBC securely, so that IBC can then enter it into the TWS/Gateway login form. So the whole 2FA security would now be dependent on the security of that link (quite apart from the technical aspects of engineering such a link). Since this would be entirely out of IBKR’s control, it would probably be unacceptable to them (and I very much do not want to upset them in this respect).

?

Anyway, what’s the point? There is already a perfectly acceptable 2FA mechanism in IBKR Mobile, that uses only IBKR-developed and approved security mechanisms, and is trivially simple to use. IBC’s only involvement in this is to invoke the 2FA mechanism repeatedly until the user acknowledges the 2FA alert (it has absolutely no involvement in the actual security dialogue between TWS/Gateway and IBKR Mobile) . So why is there any incentive to want to develop another, much more complicated solution?

?

Incorporating a TOTP feature in IBC is a non-starter. I don’t see what it could possibly achieve.

?

Richard

?