Updated: 2026-02-14
How to Create a Binance API Key
Create a read-only API key in Binance to connect your spot, futures, and margin trades to Tiltless. This guide covers key creation, permission scoping, IP restrictions, and security best practices.
Create Your API Key
Log in to your Binance account and navigate to Account > API Management. Click 'Create API' and choose 'System Generated' for the simplest setup.
Binance will ask you to complete security verification (email, SMS, or authenticator) before the key is created. Label the key something descriptive like 'Tiltless Read-Only' so you can identify it later.
- •Open Account > API Management in Binance
- •Click 'Create API' and select 'System Generated'
- •Complete security verification when prompted
- •Label the key (e.g., 'Tiltless Read-Only')
Set Read-Only Permissions
After creating the key, Binance shows the permissions editor. Enable only 'Can Read.' Leave everything else disabled.
A 'Can Read' key can access your trade history, order data, and account balances — but cannot execute trades, initiate transfers, or modify account settings. This is the only permission Tiltless requires.
- •Enable: 'Can Read' — read-only access to trades and account data
- •Disable: 'Enable Trading' — Tiltless does not place orders
- •Disable: 'Enable Futures' — read access to futures is included in 'Can Read'
- •Disable: 'Enable Withdrawals' — Tiltless never moves funds
Restrict to Trusted IPs
Binance strongly recommends restricting API keys to trusted IP addresses. Under the key's settings, select 'Restrict access to trusted IPs only' and add the IP addresses that should have access.
Unrestricted API keys on Binance may have a 90-day expiration or reduced rate limits. IP restriction removes these limitations and adds a security layer — even if the key is leaked, it will not work from unauthorized addresses.
Copy and Store Your Credentials
Binance shows your API key and secret key after creation. Copy both values immediately — Binance will not show the secret key again.
Paste the API key and secret key into Tiltless under your integration settings. Tiltless encrypts both values at rest.
- •Copy the API key (public identifier)
- •Copy the Secret key (shown only once — save it now)
- •Paste both into Tiltless to complete the connection
Security Best Practices
API keys are credentials. Treat them with the same care as a password.
- •Never share your secret key outside of trusted integrations
- •Use read-only permissions — a journal should never have trade execution access
- •Enable IP restriction to limit where the key can be used
- •Revoke and replace any key you suspect has been compromised
- •Rotate keys periodically — delete the old key and create a fresh one
- •Do not store secret keys in plain text, screenshots, or shared documents
Troubleshooting
If your connection fails after entering credentials, check these common issues.
- •Verify the secret key was copied completely — it is long and easy to truncate
- •Confirm 'Can Read' is enabled in API Management
- •Check IP restriction settings if the key is IP-locked
- •Ensure the key has not been revoked, expired, or hit rate limits
- •Try creating a new key if the existing one continues to fail
Related Resources
FAQ
?Where do I find API settings in Binance?
Go to Account > API Management in your Binance account. You can also search for 'API' in the Binance search bar to navigate directly.
?What permissions should I enable?
Enable only 'Can Read.' Do not enable 'Enable Trading', 'Enable Futures', 'Enable Withdrawals', or any other permission. Tiltless only reads trade history.
?Should I choose system-generated or self-generated keys?
Choose 'System Generated' for the simplest setup. Self-generated keys (Ed25519 or RSA) are also supported but require additional steps to generate a key pair locally.
?Is it safe to share my Binance API key with Tiltless?
Yes, when scoped to read-only. A 'Can Read' key cannot execute trades, transfer funds, or modify your account. Tiltless encrypts your credentials at rest.
?What if my API key is leaked?
Revoke it immediately in Binance under API Management. A read-only key cannot move funds, but you should still revoke and replace any compromised credential. Create a new key and update it in Tiltless.
?Can I restrict the API key to my IP address?
Yes, and Binance strongly recommends it. Under 'Restrict access to trusted IPs only,' add your IP address. Unrestricted keys on Binance may have a 90-day expiration.
?Does one API key cover spot, futures, and margin?
Yes. A single Binance API key with 'Can Read' permission covers all product types: Spot, USDT-M Futures, COIN-M Futures, and Margin.
?How do I revoke a Binance API key?
Go to Account > API Management, find the key, and click 'Delete.' The key stops working immediately. Tiltless retains imported data but stops syncing.
Connect Binance and start reviewing trades
Paste your read-only API key into Tiltless and your trades sync automatically. Under two minutes to set up.