How to create a Bybit API key safely

4 min read·Updated 14 October 2026·By the Treo team

An API key lets software trade on your Bybit account without your password. Set up the right way, it can trade but can never withdraw. This takes about five minutes.

Start free with GoogleNo card needed

Before you start

You need a Bybit account with identity verification completed and 2FA switched on. No account yet? Sign up on bybit.com first.

Step 1. Open API

On Bybit, open your profile menu and choose API, then Create New Key, and pick System generated API keys.

Step 2. Name it and choose access

Choose API Transaction, name the key Treo and choose Read and Write.

Step 3. Set the permissions

Under IP restriction, allow only these IPs and add: 2.29.57.164

Spot: Trade ticked
Everything else unticked
Withdrawal: off

Confirm with your security code.

Step 4. Paste it into Treo

Bybit shows the API Key and the Secret Key. The secret appears only once. In Treo, pick Bybit and paste both. Keep the USDT you want Treo to use in your Unified Trading account.

Mistakes to avoid

Choosing Read only. Treo needs Read and Write to place trades.
Leaving the IP restriction empty. Treo will refuse the key, and Bybit expires keys without one.
Ticking Withdrawal. Treo will refuse the key.
Keeping your USDT in the Funding account, where Treo cannot trade it.

Questions

Can I delete the key later?

Yes. Delete it under API on Bybit and Treo loses access at once. Your coins stay where they are.

Which account should my USDT be in?

Your Unified Trading account. Move it there from Funding with a transfer inside Bybit.

Does Treo trade futures on Bybit?

No. Treo trades spot only, so you own the coins it buys and there is no leverage.

Put your trading on autopilot

Start free with Google