Skip to content
TrackQ
Coming soon to the App Store
Menu

Guide

How to get a Questrade API token

A Questrade API token lets an app read your accounts without your password. You make it yourself in App Hub, and you can switch it off there at any time.

By Hemant Kumar, published October 15, 2026

Questrade calls it a token. Other apps call it a key, a refresh token or a manual authorization. It is the same thing: a long string you copy out of Questrade’s App Hub and paste into the app that will read your accounts.

Make the token

  1. Sign in to App Hub. Open App Hub and sign in with your usual Questrade login. A computer is easiest; a phone browser works too. Questrade’s documentation calls it the API centre. The first time, Questrade asks you to activate the API and accept its API agreement.
  2. Register a personal app. Choose Register a personal app. Any name and description work, for example “Portfolio”.
  3. Allow account access only. Tick Retrieve balances, positions, orders and executions. A tracker needs nothing else, so leave market data unticked and the call back URLs empty. Save.
  4. Generate the token. Under your app, choose New device, then Generate new token. Copy it straight away: Questrade shows it only once. Older guides call this step New manual authorization.

Already registered an app? Skip to step 4 and make a new token under it.

How long a token lasts

  • Each token is used once. The app trades it for a short-lived access token and a new token for next time. Every refresh replaces the old one, and the old one stops working.
  • Unused for about a week, it expires. Then generate a new one in App Hub, the same way.
  • One token, one app. If two apps or two devices share a token, the first to refresh it locks the other out. Make a separate token for each.

Keep it safe

  • Treat it like a password. Whoever holds it can read your accounts until it is used or revoked.
  • Paste it only into the app it is for. Never into a website, a chat or an email, and never send it to support.
  • To switch an app off, revoke its access in App Hub. The app can no longer read anything.

Using it with TrackQ

TrackQ walks you through these steps on its connect screen, with a button that opens App Hub. Copy the token on a Mac and paste it on your iPhone with Universal Clipboard, or send it to yourself with AirDrop or Notes.

TrackQ keeps the token in the iOS Keychain on that device only, and saves each new token the moment Questrade issues it. A TrackQ widget on your Home Screen refreshes in the background, so the token never goes a week unused.

If your token stops working

Questrade refuses a token for one of three reasons: it went about a week without a refresh, another app or device used it, or it was revoked in App Hub. Your saved portfolio stays in TrackQ. Generate a new token and paste it in Settings.

More guides