Exchange API Keys
Golden Rules — Read Before You Start
- ✅ Enable read-only / view permissions (balances, positions, account info).
- ❌ Never enable Withdraw, Trade, Transfer, or Futures-trading permissions.
- 🔒 The API Secret (and passphrase) is shown only once — copy it immediately.
- 🧷 Keep keys in CryptoBaza only; never paste them into untrusted websites.
- 🌐 IP whitelisting is optional for mobile use and can break access if your IP changes — leave it off unless you have a static IP.
Exchange interfaces change over time; if a menu name differs, look for a section called API, API Management, or API Keys in your account settings. Below are the steps for the 6 exchanges supported in CryptoBaza's Free tier.
Binance
- Log in at binance.com → hover your profile icon → Account → API Management.
- Click Create API, choose System generated, give it a label (e.g. "CryptoBaza"), and confirm with 2FA / email / SMS.
- On the new key, click Edit restrictions.
- Keep only Enable Reading ticked. Make sure Enable Spot & Margin Trading and Enable Withdrawals are OFF.
- Save. Copy the API Key and Secret Key (the secret is shown once) into CryptoBaza.
Bybit
- Log in at bybit.com → hover your profile → API.
- Click Create New Key → choose System-generated API Keys.
- For API key usage, select Read-Only.
- Under permissions, tick read scopes for Wallet / Assets / Positions / Spot. Leave Trade and Withdraw unticked.
- Confirm with 2FA. Copy the API Key and API Secret into CryptoBaza.
Bitget — requires a passphrase
- Log in at bitget.com → profile → API Management → Create API → System-generated.
- Set a Passphrase (you choose it — you'll also enter it in CryptoBaza).
- Set permissions to Read-only. Do not enable Trade or Withdraw.
- Confirm with 2FA. Copy the API Key, Secret Key, and Passphrase into CryptoBaza.
OKX — requires a passphrase
- Log in at okx.com → profile → API → Create V5 API Key.
- Give it a name and set a Passphrase (you choose it — also entered in CryptoBaza).
- Set Permissions to Read only. Leave Trade and Withdraw off.
-
Confirm with 2FA. Copy the API Key, Secret Key, and Passphrase into CryptoBaza.
Note: EEA-region accounts use eea.okx.com; CryptoBaza detects this automatically.
BingX
- Log in at bingx.com → profile → API Management.
- Click Create API and label it.
- Select Read-only permissions (spot/asset reading). Do not enable trading or withdrawals.
- Confirm with verification. Copy the API Key and Secret Key into CryptoBaza.
Coinbase
Coinbase uses the Coinbase Developer Platform (CDP) for API keys.
- Go to portal.cdp.coinbase.com (Coinbase Developer Platform) and sign in with your Coinbase account.
- Open API Keys → Create API key.
- Grant view / read access only — no trade or transfer scopes.
- Download/copy the generated key. Coinbase keys are an API key name plus a private key (CryptoBaza supports the CDP ES256 key format as well as legacy HMAC keys).
- Paste the credentials into CryptoBaza.
After connecting: balances sync automatically. If a connection fails, double-check you copied the secret correctly (no leading/trailing spaces) and that the key has reading enabled.