How to Connect a Trading Bot to Binance with API Keys (Safely)

Connecting a bot to Binance takes about five minutes, and the safety comes down to one thing: what you allow the API key to do. Get the permissions right and a leaked key can't cost you your balance. Here's the exact, safe way to do it.

Create the key with trading enabled and withdrawals disabled. That one setting is what keeps your funds safe even if the key is ever exposed.

On this page

What an API key is
Create the key
The right permissions
Connect the bot
Staying safe
FAQ

What an API Key Actually Is

An API key is a pair of codes — a key and a secret — that let an app act on your exchange account through Binance's official interface. A trading bot uses it to place and close orders, exactly like the Binance app does when you tap buy or sell.

The key never gives anyone your password or login. And with the right permissions, it can't withdraw your money either.

Step 1–3: Create the Key on Binance

Log in to Binance and open Account → API Management.
Click Create API, choose a System-generated key, and name it (e.g. “Prometheus”).
Complete 2FA verification. Binance shows your API Key and Secret Key — copy both now; the secret is shown only once.

Let the bots trade while you don't

Prometheus runs a managed, risk-controlled strategy 24/7 on your own exchange — non-custodial, with a 90-day money-back guarantee.

Get Lifetime Access →

Step 4: Set the Right Permissions (The Important Part)

On the key's settings, set exactly this:

✅ Enable Reading — so the bot can see balances and positions.
✅ Enable Spot & Margin Trading (or Futures, if you trade futures) — so it can place orders.
❌ Disable Withdrawals — leave this OFF. Never enable it for a bot.
✅ Restrict access to trusted IPs — add the bot's server IP if you have it; this locks the key to that one machine.

With withdrawals off, the key can trade but can never move funds off your account — the core of keeping a bot safe.

Step 5: Connect the Bot

In your bot, paste the API key and secret, pick your exchange (Binance / Binance.US) and market (spot or futures), and save. Prometheus shows its server IP so you can whitelist it, then connects in one click — and can auto-reconnect on restart so you stay online.

If your bot offers demo / paper mode, start there to confirm everything's wired correctly before going live.

Keeping the Connection Safe

Keep withdrawals disabled on the key — always.
Use IP whitelisting so only the bot's server can use it.
Turn on 2FA for your Binance account.
If anything looks off, delete the key in API Management — it revokes access instantly, and your funds were never at withdrawal risk anyway.

Frequently Asked Questions

Is it safe to connect a trading bot to Binance?

Yes, if you create a trade-only API key with withdrawals disabled and, ideally, IP whitelisting. In that setup the bot can place trades but can never withdraw your funds, so even a leaked key can't drain your account.

What Binance API permissions does a trading bot need?

Enable Reading and Spot/Margin (or Futures) trading, and disable Withdrawals. Add IP restriction to the bot's server if you can. That's everything a bot needs to trade and nothing it needs to move money out.

Can someone steal my crypto with my API key?

Not if withdrawals are disabled on that key — it can only trade, not transfer funds off Binance. Never enable withdrawal permission for a bot, and delete any key you're unsure about.

This article is for information only and is not financial advice. Cryptocurrency trading involves substantial risk of loss and is not suitable for everyone. Past performance does not guarantee future results. Never trade money you cannot afford to lose.