This guide explains how to stop repeated Tradovate and NinjaTrader login prompts using Token Management — what it does, how to set it up correctly, and what rules to follow if you ever change the setting.

You might need this article if:

Tradovate and NinjaTrader connections use OAuth authentication — a secure method where Tradecopia receives a token from Tradovate rather than storing your credentials. This token has an inactivity timeout of approximately 60 minutes.

When the token expires — typically because you closed the app or left it inactive — re-authentication is required. The next time you open Tradecopia, a browser popup appears and you must log in to Tradovate again. This is the OAuth method working as designed, not a bug in Tradecopia.

When Token Management is enabled, Tradecopia's server takes over the token refresh job. Rather than the token expiring when the app is closed, the server keeps the connection state active and refreshes it automatically in the background.

Effect for the user:
- Re-authentication is no longer required in the majority of sessions
- The browser popup and Tradovate login step is eliminated on most app restarts
- The connection resumes automatically when you open Tradecopia

What is not affected:
- The initial login when first connecting an account still requires Tradovate authentication — Token Management applies after the first successful connection
- In rare circumstances, a token refresh may still fail and prompt re-authentication — this is uncommon and should not be a regular occurrence

Token Management does not apply to Pro+ Lite or Pro+ users. On cloud plans, your connection is managed server-side by default and the token stays active automatically. You will not see this setting and do not need it.

If you are on Pro desktop and experiencing repeated login prompts, continue below.

The order of these steps matters. Follow them exactly — skipping or reordering steps can result in your token expiring unexpectedly at the next refresh cycle.

Once you have reconnected, Token Management is active. Your connection will stay live across app restarts without requiring you to log in again.

Note: NinjaTrader accounts use the same Tradovate OAuth system. If you connect NinjaTrader accounts, include them in the same delete-and-reconnect sequence.

Do not toggle Token Management on and off repeatedly — this destabilises your connection and can cause your token to expire at an unpredictable point.

Skipping the reconnect step after any toggle change will cause your session to drop at the next token expiry cycle.

Token Management does not store your Tradovate credentials. The authentication process remains entirely between you and Tradovate — Tradecopia has no access to your username, password, or authentication data.

What Tradecopia's server manages is the connection state and token refresh only. The security model is the same as the standard OAuth flow — only the token lifecycle management is handled server-side.

Token Management applies identically to both Tradovate and NinjaTrader connections. Since NinjaTrader accounts are Tradovate accounts accessed through the NinjaTrader platform, the underlying OAuth system is the same for both. Enabling Token Management covers both connection types simultaneously.