How to create a Binance API key safely

5 min read·Updated 2 October 2026·By the Treo team

An API key lets software trade on your Binance account without your password. Set up the right way, it can trade but can never withdraw. This takes about five minutes.

Start free with GoogleNo card needed

Before you start

You need a Binance account with identity verification completed and 2FA switched on. Binance requires both before it lets you create API keys.

Before you start, 18 seconds · Binance screens are illustrations

Step 1. Open API Management

In the Binance app, tap your profile picture at the top left, then Account, then API Management. On a computer, open your profile menu and choose API Management.

Find API Management, 13 seconds · Binance screens are illustrations

Step 2. Create the key

Tap Create API, choose System generated, give it a name such as Treo, and confirm with your 2FA code.

Binance now shows an API Key and a Secret Key. The secret appears only once, so keep that screen open until you have pasted it.

Create the key, 15 seconds · Binance screens are illustrations

Step 3. Set the permissions

Tap Edit restrictions and match this exactly. These two settings are the ones people miss.

Setting on Binance	Value
Enable Reading	ON
Enable Spot and Margin Trading	ON
Enable Withdrawals	OFF
Restrict access to trusted IPs only	ON

To use the key with Treo, paste this address into the trusted IP box and tap Save: 2.29.57.164

With withdrawals off and the IP restriction on, the key is useless to anyone who copies it.

Safe permissions and the trusted IP, 22 seconds · Binance screens are illustrations

Step 4. Paste it into your bot

Copy the API Key and the Secret Key and paste each into the connect screen. Treo checks the key, rejects it if withdrawals are enabled, encrypts the secret and never shows it again.

Paste and connect, 30 seconds · Binance screens are illustrations

Mistakes to avoid

Leaving Enable Withdrawals on. No trading bot needs it.
Skipping the trusted IP. Binance may also remove trading permission from keys without one.
Sharing the secret in a chat or a screenshot. If that happens, delete the key and make a new one.
Closing the Binance screen before copying the secret. You will have to create a new key.

Questions

Is it safe to give a trading bot my API key?

It is safe when withdrawals are off and the key is restricted to the bot's IP address. The key can then only read your balance and place trades.

Can I delete the key later?

Yes. Delete it in API Management on Binance and the bot loses access at once. Your coins stay where they are.

Why does Binance ask for a trusted IP?

It ties the key to one server so nobody else can use it. Binance also limits trading permission on keys that have no IP restriction.

Are the videos real Binance screens?

They are illustrations of the Binance screens, made to show where to tap.

Put your trading on autopilot

Start free with Google