Note: The following API key permission rules are no longer applicable as of 2023-10-24.
Fellow Binancians,
Binance will extend the validity period of "Enable Spot & Margin Trading" permission rules of the API Key from 30 days to 90 days on 2021-07-27 (UTC), with details as follows:
If your API Key does not have whitelisted IP address(es), i.e. this API Key allows access to any IP address, your selected "Enable Spot & Margin Trading" permission will be valid for 90 days from the activation time. The system will automatically uncheck the permission after the expiration date. At that time, you are able to manually enable "Spot & Margin Trading" permission again, then you can view the corresponding expiration time prompt on the "Enable Spot & Margin Trading" permission.
If your API Key has whitelisted IP address(es), the "Enable Spot & Margin Trading" permission will not expire.
The new rules are valid for all accounts, including normal accounts, master accounts and sub-accounts.
The API Key created before the adjustment time will not trigger the new rules automatically. However, when you edit the permissions, there will be a pop-up window if the above rules are met. After your confirmation, "Enable Spot & Margin Trading" will be enabled and will be valid for 90 days.
Binance recommends that you whitelist trusted IP address(es) for the API Key to improve your account security. Please do not disclose your API Key to anyone to avoid asset losses. Be aware that your API Key may be disclosed by authorizing it to a third-party platform.
Risk Warning: Margin trading carries a substantial risk and the possibility of both significant profits and losses. Past gains are not indicative of future returns. All of your margin balance may be liquidated in the event of extreme price movement. The information here should not be regarded as financial or investment advice from Binance. All trading strategies are used at your discretion and your own risk. Binance will not be liable to you for any loss that might arise from your use of Margin.
Thanks for your support!
Binance Team
2021-07-26
Trade on-the-go with Binance’s crypto trading app (iOS/Android)
Find us on
Telegram: https://t.me/binanceexchange
Twitter: https://twitter.com/binance
Facebook: https://www.facebook.com/binance
Instagram: https://www.instagram.com/binance
Note: This announcement was last updated on 2023-10-24 to clarify that the aforementioned API key permission rules are no longer applicable as of 2023-10-24.
Binance reserves the right in its sole discretion to amend or change or cancel this announcement at any time and for any reasons without prior notice.
FAQs
Binance recommends that you whitelist trusted IP address(es) for the API Key to improve your account security. Please do not disclose your API Key to anyone to avoid asset losses. Be aware that your API Key may be disclosed by authorizing it to a third-party platform.
What are API key permissions? ›
API key permissions
No Access prevents the API key from accessing any endpoint within the selected permission. Read Access allows the API key to access GET endpoints within the selected permission. Full Access allows the API key to access GET , PATCH , PUT , DELETE , and POST endpoints within the selected permission.
What is API key restriction? ›
API key restrictions ensure that only your apps and websites can use your keys. For security reasons, we recommend that you add restrictions that specify: Which clients or websites can use your API keys. The Google Cloud APIs that your application can call using your API keys.
How to get API key for Binance US? ›
Here's how to retrieve your API Key:
- Log in to your Binance.US account.
- On the upper navigation menu, click API Management on the dropdown menu that appears when you hover over your email. ...
- Enter a label for your API Key. ...
- Complete 2-Factor Authentication (2FA) to proceed and confirm the confirmation email.
String. The API key string is an encrypted string, for example, AIzaSyDaGmWKa4JsXZ-HjGw7ISLn_3namBGewQe .
What does API key stand for? ›
An application programming interface (API) key is a code used to identify and authenticate an application or user. API keys are available through platforms, such as a white-labeled internal marketplace.
How do I authorize my API key? ›
API Key Authentication
To enable access to a secured API, create one or more API keys. The API key is then supplied in the HTTP request using the Authorization header. See Managing API Keys for more information on adding additional keys.
What are the requirements for API key? ›
Since the API key itself is an identity by which to identify the application or the user, it needs to be unique, random and non-guessable. API keys that are generated must also use Alphanumeric and special characters. An example of such an API key is zaCELgL. 0imfnc8mVLWwsAawjYr4Rx-Af50DDqtlx .
What is API enabled permission? ›
This feature then allows enterprise users to allow specific access of their data to customers, staff, or external partners. With API enabled permission Salesforce, you can easily control and manage who has access to certain pieces of your data, and who can modify it.
What are API secrets? ›
Secret API keys These are used for access to sensitive data (and may include write access). As the name implies, these are secret and shouldn't be shared publicly. These are often found in server-side applications.
In this example, the Binance API is generated by the exchange and you then pass it on to another application. The application will then import your data based on the permissions you allow for. An API Secret, also referred to as API Private Key is simply a password used in combination with the API Key.
Can I share my Binance API key? ›
However, by sharing your API key, you are effectively providing these third-parties with critical access to your account. As such, you must treat API keys like passwords — keep them private and secure.
What is Binance API used for? ›
Binance API is widely used to automate trading strategies, build custom interfaces for data analysis, and integrate third-party applications with the Binance ecosystem.
How do I find my private key on Binance? ›
Sign in to your Binance account and navigate to the account you want to export. On the account page, click the three-dot menu and select "Export Private Key" to confirm your request. Your personal key has been revealed. Copy it with your mouse and save it somewhere safe.
What are API permissions? ›
API permissions are used to grant access to specific scopes or permissions that are defined by the API. The user or administrator is requested to provide consent when a client application seeks access to the API, specifying the scopes or permissions that it requires.
What can someone do with your API key? ›
API keys are generally not considered secure; they are typically accessible to clients, making it easy for someone to steal an API key. Once the key is stolen, it has no expiration, so it may be used indefinitely, unless the project owner revokes or regenerates the key.
Are API keys credentials? ›
These credentials are in the form of an API key - a unique alphanumeric string that associates your Google billing account with your project, and with the specific API or SDK.
