There was a discussion thread about this a year ago, and it was decided that an API trader can use IP restriction instead of the security device for TWS login (without signing the opt-out letter). I was able to setup an account this way. Lately I've been trying to setup another account this way, but haven't bumped into a CSR that knows about this. Does anyone know the current policy on this? Have you been able to setup an account this way? Thanks, Kub