Account protection
No email to hijack. No phone to swap.
Your client area is identified only by a 16-digit account number. Its protection rests on what you choose: a strong password, a passkey or an authenticator app, and a recovery kit you keep offline.
- Account number, not your identity
- Passkeys that only work on our domain
- Authenticator app as a second factor
- Recovery kit kept offline, by you
How your account works
Six elements, all under your control.
Nothing in your account depends on an email inbox or a phone line that someone else could take over.
- Account number
- 16 digits, generated for you when you open your account. It identifies your account; keep it private.
- Password
- Chosen by you. We store only a one-way hash, so nobody at Lombard Private can read it.
- Passkey
- Optional. Sign in with your fingerprint, face or device PIN. It is tied to lombardprivate.com and cannot be used on a fake site.
- Authenticator app
- Optional second factor: a short code from an app on your phone, renewed every 30 seconds.
- Recovery kit
- Downloaded when you open your account. It restores your access if you lose your account number or your password.
- Sessions
- See every device signed in to your client area, and sign any of them out remotely.
4831 2207 9154 6602
Keep it safe: we can’t reset it — we don’t know who you are.
Why your recovery kit matters
We do not know who you are, so no identity check could ever prove that an account is yours. Your recovery kit is the only way back in if you lose your other credentials.
Ten minutes, once
Your security checklist.
Most account takeovers rely on a reused password, a phishing page or a lost recovery code. Each step below closes one of those doors.
- Use a long, unique password, ideally generated and stored by a password manager.
- Add a passkey: it is the strongest protection against phishing, because it only works on lombardprivate.com.
- Add an authenticator app as a second factor, on a device you keep locked.
- Download your recovery kit and keep it offline, on paper or an encrypted drive, away from your devices.
- Bookmark lombardprivate.com and always open your client area from your bookmark, never from a link.
- Review your active sessions from time to time and sign out of devices you no longer use.
- Allow browser notifications on a device you trust, so margin alerts reach you quickly.
- Never share your password, codes or recovery kit. We will never ask for them, by any channel.
If you lose access
Plan for it before it happens.
Without email or phone recovery, your recovery kit and your extra factors are what bring you back in. Here is what to do in each case.
Beware of “recovery” offers
Nobody can recover an account for you without your recovery kit, and nobody legitimate will offer to for a fee. Anyone who does is attempting a scam.
| Situation | What to do |
|---|---|
| Forgotten password | Restore access with your recovery kit, then choose a new password. |
| Lost account number | Restore access with your recovery kit, which identifies your account. |
| Lost or replaced phone or security key | Sign in with your remaining factors or your recovery kit, then remove the old passkey or authenticator and add the new device. |
| Lost everything: number, password and recovery kit | We cannot restore access. Your loan continues under its terms, but you can no longer manage it, add collateral or designate where your collateral is returned. |
Alerts
Warned without email or phone.
Alerts about your loan appear in your client area and, if you allow it, as browser notifications on the devices you choose. You can withdraw that permission at any time in your browser settings.
- Early warning when your loan-to-value reaches 65%.
- Margin call at 70%, with 72 hours to add collateral or repay part of the loan.
- Check your client area regularly, especially when markets move: an alert you have not seen still counts.
- < 65%Healthy. Nothing to do.
- 65%Early warning in your client area.
- 70%Margin call: 72 hours to top up or repay part, otherwise only enough is sold to return to 65%.
- 80%Partial liquidation: only enough is sold to return to 65%.
- 90%Full liquidation. Any surplus is returned to you.
Devices and browsers
Keep the device as safe as the account.
Your client area is only as secure as the device you open it on.
Shared or public computers
Avoid them for your client area. If you have no choice, use a private window and sign out when you finish.
Almost nothing stored
This website sets no cookies. It keeps only your last simulation, display currency and video preference in your browser’s local storage, on your device.
Keep everything updated
Install system and browser updates promptly, and lock your devices with a PIN, a password or biometrics.
Mind your extensions
Browser extensions can read the pages you visit. Keep only those you trust on the device you use for your client area.
Questions
Account protection: straight answers.
Anything else? Our advisors answer by secure message from your client area, 7 days a week.
Help centreWhy is there no email recovery?
Because we do not hold your email address, and email is the most common route to account takeover. Your recovery kit replaces it: keep it offline, and you can restore your access without involving anyone.
What is a passkey, and why is it safer than a password?
A passkey is a credential stored on your device or in your password manager and unlocked with your fingerprint, face or PIN. It is tied to lombardprivate.com, so it cannot be typed into a fake site or stolen through a phishing message, and there is nothing to remember.
Can I use both a passkey and an authenticator app?
Yes. You can add a passkey, an authenticator app or both, alongside your password. Having more than one factor also gives you a way back in if you lose a device.
What if someone learns my account number?
Your account number identifies your account but does not open it: your password and any second factor are still needed. Keep it private all the same, as you would a bank account number.
I lost my recovery kit but can still sign in. What should I do?
Sign in and create a new recovery kit straight away from your security settings, then store it offline. Do it while you still have access, not after.
Can anyone at Lombard Private see my password or reset my account?
No. We store only a one-way hash of your password, and we hold no identity data that could be used to verify a reset request. That is also why we never ask for your password, your codes or your recovery kit.
How will I know if my loan needs attention?
Alerts appear in your client area and, if you enable them, as browser notifications on the devices you choose. Check your client area regularly, especially when markets move.
A private account, in a minute.
No email, no phone, no documents: an account number, a password and the protections you choose.
- No KYC
- No email, no phone
- Zero fees
- Repay any time