How to connect your broker account to Finmind safely

Connecting your brokerage account lets Finmind show your real cash and holdings and send the orders you confirm. Because it means handing over login details, you should know exactly what happens to them. This guide explains what you need, how to connect step by step, what Finmind stores and how it is protected, and how to disconnect. Connecting and syncing a brokerage account is free for every user.

What connecting does

Finmind connects to accounts on fondbozori.uz, the online trading terminal used for UZSE securities. Once an account is connected:

• Finmind syncs the account's cash and holdings into the Live account block on your Portfolio page.
• It queues a first sync and a fetch of your transaction history in the background, so your trades and their costs can be reconciled without uploading statements by hand.
• Active accounts are synced again automatically on a schedule, and you can press Sync now at any time.
• The Trade page can send buy and sell orders through the account, always after a review and an explicit confirmation.

What you can do with the connected account afterwards is covered in free portfolio, simulator and trading on Finmind.

What you need before you start

Have these details from your broker ready:

• Account ID: your fondbozori.uz login or account identifier.
• Member company: the broker (or bank) through which you hold the account. The form shows the terminal's member list, and each name shows its member number. This field is required, because orders are routed through the member company.
• Account password: the password you use to log in to fondbozori.uz.
• Inquiry PIN: the separate PIN the terminal uses for account inquiries.

If you do not know your member number or inquiry PIN, ask your broker.

How to connect, step by step

1. Sign in and open Brokerage (the page is at /brokerage).
2. In the Connect a brokerage account form, enter a Label, a name only you see, such as "My fondbozori account".
3. Enter your Account ID.
4. Under Member company, choose your broker from the list. You can filter it by name or member number. If your broker is not listed, or the list cannot be loaded, choose Other… and type the member number or the member's name.
5. Enter your Account password and Inquiry PIN.
6. Press Connect account.
7. The account appears under Your accounts. After the first sync, open Portfolio to see your live cash and holdings.

You can connect more than one account. The same account ID cannot be added twice.

What Finmind stores and how it is protected

Here is what the code does with your details, stated plainly.

Your password and inquiry PIN are encrypted before they are saved. Finmind encrypts both with Fernet symmetric encryption from the Python cryptography library, using a key that exists only in the server's configuration. Only the encrypted text is written to the database. If the key is missing or invalid, Finmind refuses to store the credentials at all and returns an error, rather than saving them in plain text or with a temporary key. The form states this as "Encrypted at rest. Never displayed back, never logged."

Secrets are never shown back. The password and PIN fields are write-only: no page or API response ever returns them, in plain or encrypted form. They are decrypted in memory only for the moment they are needed to log in to the fondbozori.uz terminal, for a sync or an order, and are not written to logs.

Your account ID is masked. Wherever Finmind shows the account, only the first two and last two characters of the ID are visible.

The broker session is protected the same way. To avoid logging in to the terminal on every request, Finmind keeps one session per account in its server cache for a limited time. That session data is encrypted with the same key and is never returned by any API.

Your data is yours only. Every brokerage request is limited to the signed-in user's own accounts, and error messages stored for a failed sync hold only non-sensitive reasons.

Orders need your confirmation. The server refuses to record an order unless the request carries an explicit confirmation. A real order is sent only when both the platform's live switch and your own Live trading setting in Settings are on. Otherwise, orders are recorded as dry-runs and nothing reaches your broker.

Managing a connected account

Each account in Your accounts shows its masked account ID, member company, and the time of the last successful sync and last attempt. From there you can:

• press Sync now to pull fresh cash and holdings
• press Edit connection to fix a wrong detail. Blank fields keep their stored values, and saving drops the saved broker session so the next sync logs in with the new details
• untick AI assistant may trade here if you do not want the AI assistant to place orders on this account. Even when it is ticked, the assistant never places an order without your approval
• review the Sync history to see each attempt and its outcome

If you change your fondbozori.uz password, use Edit connection to enter the new one. Syncs fail while the stored password is wrong.

How to disconnect

1. Open Brokerage and find the account under Your accounts.
2. Press Remove.
3. Confirm the dialog. It warns that this deletes the stored credentials and disconnects the account, and that it cannot be undone.

Removing an account deletes its record, including the encrypted password and PIN, together with its sync history and the Finmind order records placed through it. It does not close your account at the broker, and it does not change your password on fondbozori.uz. If an active AI mandate is funded from the account, Finmind asks you to close the mandate first. For extra certainty, you can also change your fondbozori.uz password after disconnecting.

To learn how brokers and UZSE fit together before you connect, read how to buy shares in Uzbekistan. You can also explore the public /stocks and /uzse-bonds pages without an account, or create a free account to get started.

Frequently asked questions

Is it safe to give Finmind my fondbozori.uz password?

Finmind encrypts your password and inquiry PIN with Fernet before saving them, using a key held only in the server's configuration, and refuses to store them at all if that key is missing. They are never shown back, never returned by any API and never logged. They are decrypted only in memory when needed to log in to the terminal. No system is free of risk, so use a strong password and change it if you ever suspect a problem.

Which brokers can I connect?

You can connect a fondbozori.uz account held through a member company from the terminal's member register, which lists brokers, banks and depositories with their member numbers. If yours is not in the list, choose Other and enter the member number your broker gave you.

Can Finmind place orders without my permission?

No. The server records a manual order only with an explicit confirmation, and the AI assistant only proposes orders for you to approve. Paid automation, such as a stop-loss or an autopilot plan, places orders on its own only after you have explicitly armed it. A real order reaches your broker only when both the platform's live switch and your own Live trading setting are on, otherwise it is recorded as a dry-run.

What happens to my data when I remove the account?

The account record is deleted, including the encrypted password and PIN, its sync history and the Finmind order records placed through it. Your account at the broker is not affected, and you can connect it again later.

This article is for education only and is not investment advice. Investing in securities involves risk, including the loss of money you invest.