Exchange API Security Best Practices

Securely connect Binance, Bybit, and OKX via non-custodial API keys with IP whitelisting, minimum permissions, and key rotation.

Non-Custodial by Design

Algonney does not custody user funds. Assets remain on the connected exchange account while trade-only API keys allow configured bots to place and manage orders.

Recommended API Key Settings

  • Disable withdrawal and transfer permissions.
  • Use trade-only permissions required for your exchange workflow.
  • Enable exchange IP whitelisting when available.
  • Rotate keys periodically and delete keys that are no longer used.

API keys should be treated as sensitive credentials. Never share keys publicly or grant permissions you do not need.

Review Algonney security practices