A Safe, Private Portfolio & Trade Tracker
No exchange API keys. No broker logins. Encrypted at rest, protected with two-factor authentication, and yours to export or delete any time. Security-first tracking for stocks, crypto and more.
No credit card required · Free forever plan · No API keys
Most portfolio trackers ask for your exchange API keys — handing a third party standing, real-time access to accounts that hold your money. Those trackers become honeypots, and even a read-only key leaks a complete map of your wealth. Trackfolio was built the opposite way.
Nothing about your accounts is ever shared. You log positions manually or import a CSV, live prices come in by ticker only, and your sensitive data is encrypted at rest. It's the safest way to see your whole portfolio in one place.
Zero standing credentials
No API keys, no wallet connections, no broker logins — ever. There is nothing for an attacker to steal because the app never holds access to your accounts.
Encrypted where it matters
Traffic is HTTPS end-to-end, passwords are bcrypt-hashed, and sensitive trade data is encrypted at rest — a database dump alone can't expose it.
Two-factor authentication
Protect your account with a TOTP authenticator app, so a leaked password isn't enough to get in.
Your data, your rules
EU-hosted with row-level security, no data selling, no ads, and one-click export or permanent deletion whenever you want.
Private by default
No page-view tracking, no advertising pixels, no sharing with third parties. The owner never browses your trading data.
Frequently Asked Questions
Why is not using API keys safer?
An exchange API key gives a third party standing access to your account data — and trackers holding thousands of keys are prime breach targets. Trackfolio never asks for keys, so there are no credentials to leak in the first place.
Is my data encrypted?
Yes. All traffic is over HTTPS, passwords are hashed with bcrypt, the database is encrypted at rest, and sensitive trade fields have application-level encryption on top.
Do you offer two-factor authentication?
Yes. You can enable TOTP two-factor authentication in Settings, so signing in requires a code from your authenticator app in addition to your password.
Do you sell or share my data?
Never. No data selling, no ads, no third-party sharing. Your trading data is used only to power the app for you.
Can I delete everything?
Yes — one click in Settings permanently deletes your account and all associated data, or email us and we remove it within 7 days.