How to Connect Binance API to a Trading Bot — Step-by-Step Guide

Binance API keys are a pair of credentials (an API Key and a Secret Key) that allow third-party applications to interact with your Binance account programmatically. API keys can be configured with specific permissions: reading account data, placing trades, or managing withdrawals. For trading bots, you only need trade permissions — never enable withdrawal access when connecting to any third-party service.

Log in to your Binance account. Navigate to Profile → API Management. Click "Create API" and choose "System generated." Enter a label (e.g., "Cripton AI Bot"). Complete 2FA verification. Important: After creation, copy both the API Key and Secret Key immediately — the Secret Key is only shown once. Store them in a secure location.

After creating your API keys, configure permissions carefully: Enable "Enable Spot & Margin Trading" and "Enable Futures" for bot trading. NEVER enable "Enable Withdrawals" — no legitimate trading bot requires withdrawal access. Optionally, restrict access to specific IP addresses for additional security.

If your bot provider requests withdrawal permissions, do not proceed — this is a red flag.

In your Cripton AI dashboard, navigate to Settings → Exchange Connection. Paste your API Key and Secret Key. Cripton AI encrypts both keys with AES-256 (Fernet) before storing them. Keys are only decrypted in ephemeral memory during trade execution and are never logged or transmitted in plain text. The connection is verified automatically by reading your account balance.

Follow these security practices when using API keys: 1) Never share your Secret Key with anyone.

2) Only enable trade permissions — never withdrawals.

3) Use IP restriction if your bot provider has a static IP.

4) Regularly rotate API keys (delete old ones, create new).

5) Monitor your Binance account for unauthorized trades.

6) Revoke API access immediately if you suspect compromise. You can delete API keys at any time from your Binance dashboard.