Binance API Key Safety Checker
Is your trading bot's API key safe?
Bots need an exchange API key. A leaked key with withdrawals enabled can empty your account; one without an IP restriction can be used from anywhere. This checker asks Binance which permissions your key has and grades it S to F.
- F: withdrawals enabled.
- D: transfers enabled and no IP restriction.
- C: trading enabled with no IP restriction.
- B: IP-locked but transfers enabled, or read-only without an IP lock.
- A: IP-locked trading key with no withdrawals or transfers.
- S: read-only and IP-locked.
The secret is used only to sign one read-only request to Binance and is never stored or logged. If your key is locked to your own IPs, Binance will refuse our request; run dmoera-grade key on your own machine instead.
Frequently Asked Questions
- Should a trading bot key have withdrawals enabled?
- No. A bot only needs to read and trade. Withdrawals let anyone holding the key send your funds elsewhere.
- Why restrict the key to trusted IPs?
- So a leaked key is useless from anywhere except the servers you chose.
Try dMoERA Studio — build, backtest, and deploy strategies with production-grade validation →