Every time I have to login to open NT8 on my computer

[eDanny]

+1
As for "password protecting the platform has been a highly request feature request from our users over the past 10 years, and this had a very high vote count. From my understanding, the majority of the community has voted to implement this.", I have been reading the forums for 15 years and don't recall ever seeing this request. Maybe I missed something...

[brucerobinson]

But wait - wasn’t the ability to Group Trades by ATM Strategy available in NT7 removed from NT8 because a majority of Users pro-actively voted that its presence in 7 offended them so much they insisted it must not darken the door of NT8 (& then many Users asked why it was no longer there missing its’ functionality in 8? & similarly to #eDanny, I don’t ever - not once - recall anyone asking for it to be removed……
Me thinks I see a pattern here……

[NinjaTrader_BrandonH]

Hello eDanny,

Thanks for your notes.

I have added your vote to this feature request.

You'll find a note regarding your feature request in the release notes when a feature is implemented.

Release Notes — https://ninjatrader.com/support/help...ease_notes.htm

[jeronymite]

Search can be a wonderful thing. A search for "password" in the Forum, followed by sorting in Ascending order of posts, produced several threads with requests for platform-level password protection:

• https://forum.ninjatrader.com/forum/...052#post115052
• https://forum.ninjatrader.com/forum/...ord-protection
• https://forum.ninjatrader.com/forum/...rd-ninjatrader
• https://forum.ninjatrader.com/forum/...rader-security
• https://forum.ninjatrader.com/forum/...3872-order-qty
• https://forum.ninjatrader.com/forum/...71725-password

Unfortunately, the Forum software restricts output to a maximum of 13 pages, so there may be more in the gap between Ascending and Descending end pages. Nevertheless, I would tend to say that the comment "password protecting the platform has been a highly request feature request from our users over the past 10 years, and this had a very high vote count. From my understanding, the majority of the community has voted to implement this" is akin to hyperbole.

It is interesting that in the second of the posts above, NinjaTrader_Dierk made the following comments:

How about simply turning on a screensaver which is password protected when you leave the PC?
...
Well, whatever password protection we could implement it would not be any safer than the one you already have with Windows.

All in all, obfuscation of "feature requests" is a policy that does not recommend itself to trust and respect for customers. All the pleading to make the process more open is of zero consequence if the attitude to customers is "broken", and there does seem to be a reasonable argument to be made that that has become the case over time. Nevertheless, it is still quite astonishing at how loyal to the platform customers are.

Thanks.

[ntcat]

Hello BigRol00,

Thanks for your note.

This was added to NinjaTrader for security purposes and we are tracking interest in adding the feature of remembering the username and password credentials so that it may be implemented in a future release of the platform. Deciding on features for future releases is not a simple black and white decision. There are many factors involved including but not limited to:

• Demand which is measured by objective user requests and subjective discretion on the part of our Product Management team.
• Feasibility
• Security
• Developer bandwidth
• Current projects in the queue
• Economics

You'll find a note regarding your feature request in the release notes when a feature is implemented.

Are you serious? Did we step back 10 years in time? Your tracking Machine ID's just detect if the Machine ID is trusted, if so allow users to login without having to type in the password over and over and over and over and over again thoughout the day.

I am forced to keep my Password manager open which is a security violation in itself, but I don't want to waste time when I got a trade and can't login quickly to my running ATM's when NT just crashes because of unknown reason such as NinjaCators Indicators are bad, ect...

Have a option in Tools->Options to login, I don't use Google or Apple to login to any passwords, and why the hell would I use them to login to other systems when they can't stop hackers from gaining your passwords to their systems.

Many Discord Teams are telling users to downgrade to avoid this problem, until it's fixed but I come here to find out your taking votes to implent a feature you had on Ver 8 for well over 5 years?

Are we under new management?

[poeds]

I dont understand why NT aren't implementing Windows features like biometrics and facial recognition, it would take a lot of the heat out of this issue. If I ask for support on the NT platform I am asked to upgrade to the latest version OK fair enough but why do you think its OK for NT not to be upgraded to use the latest Windows features?

[bltdavid]

I am forced to keep my Password manager open ...

Which password manager are you using?

[ETFVoyageur]

Please add my vote to modify this feature. I can see where someone who uses NinjaTrader to connect to a large account might want the feature. Fine ... let them keep it.

That is not my case, though. My NinjaTrader use is from my home computer and stand-alone, not connected to a broker. Even if someone broke into my house and stole my computer they could not cause any mischief with NinjaTrader. Just add a way for me to log in once and then, with my identity established, let me indicate that future logins should not be required. If my security situation changes, I can always go back and change that setting.

Another note -- the login requirement is nothing but an annoying nuisance for local use. Perhaps it would be better to (optionally) require login only when connecting to a broker?

As is, if I am stopping and starting NT a lot, which can happen when debugging, having to log in each time is incredibly annoying.

-- EV

[ETFVoyageur]

Which password manager are you using?

I don't now about ntcat, but I use KeePass. That does reduce the problem, but it is still a significant hassle that I can see no valid need for. As my previous posting suggests, make it optional and perhaps only when logging in to a broker.

Also, as ntcat noted, leaving the password manager open is a lot bigger security risk for me that having the option to turn off the login dialog would be.

--EV

[brenthilburn]

Please add my vote to modify this feature. I can see where someone who uses NinjaTrader to connect to a large account might want the feature. Fine ... let them keep it.

That is not my case, though. My NinjaTrader use is from my home computer and stand-alone, not connected to a broker. Even if someone broke into my house and stole my computer they could not cause any mischief with NinjaTrader. Just add a way for me to log in once and then, with my identity established, let me indicate that future logins should not be required. If my security situation changes, I can always go back and change that setting.

Another note -- the login requirement is nothing but an annoying nuisance for local use. Perhaps it would be better to (optionally) require login only when connecting to a broker?

As is, if I am stopping and starting NT a lot, which can happen when debugging, having to log in each time is incredibly annoying.

-- EV

Image being someone who is a 3rd party vendor who supports the platform and you need to troubleshoot which could necessitate multiple reboots...

Now the customer has to be present to baby-sit that effort account or not... In the past, the connection to the broker where REAL account information is stored was easily protected with requiring a login.. But somehow that is no longer enough "security"...

[bltdavid]

I don't now about ntcat, but I use KeePass.

Ah! I do as well.

But I've never let KeePass do any kind of auto-fill, I open
KeePass as needed and copy/paste passwords (long 14
to 32 character auto-generated passwords I never try to
remember) usually into web login pages.

What's your KeePass finger workflow?
Does it autofill for you?

[ETFVoyageur]

Ah! I do as well.

But I've never let KeePass do any kind of auto-fill, I open
KeePass as needed and copy/paste passwords (long 14
to 32 character auto-generated passwords I never try to
remember) usually into web login pages.

What's your KeePass finger workflow?
Does it autofill for you?

I also use complex passwords ... typically 24+ autogenerated random characters ... that's why I use KeePass. I just checked and it claims my NT password is only 21 characters, 125 bits quality.

To answer your question, it does not autofill NT -- I presume their dialog is not using whatever KeePass normally recognizes. It would help a lot if NT would get with the program and use standard password stuff that a password manager could recognize and autofill. You say you do not use KeePass autofill ... by all means, give it a try. It is very convenient in most cases, aside from outliers like NT.

Instead, when working with NT I have to keep KeePass running and minimized. When I need to log in to NT I click on KeePass in the taskbar to bring it up. The NT item is the top one in the KeePass list at that point so I just double-click on its password field to have KeePass temporarily copy it to the clipboard. Then I go to the password field in NT and ctrl-V to paste the password.

--EV

[NinjaTrader_BrandonH]

Hello ETFVoyageur,

Thanks for your note.

I have added your vote to this feature request.

[Bundy76]

After seeing the original outcry for this to be rectified and expecting it to be trivial, it's incredibly disappointing to hear that this has been turned into yet another "We're tracking votes for this feature" scam.

I install desktop versions of programs so that I can double click the icon, go grab a coffee, hit the rowing machine, shower and come back expecting everything to be ready to work with.

Worse... There are times when Ninjatrader has to be restarted because its not happy and you're in the middle of a trade that you now have to stress about while you wait to type passwords to fire it up again.

"Tracking this feature request" is BS. You could implement a configurable option for it with ten minutes work or less. But like many easy and strangely unimplemented feature requests, just don't want to it seems.

[QuantKey_Bruce]

I firmly believe this is not a new feature request. This is a failure in which a feature was removed without notice after having been a standard feature of the platform for almost two decades, and most users appear to be upset about it.

For the few who think requiring a manually typed-in password each time you run the application is a good idea, it can be the default behavior if there is a way to opt out through settings.