A Complete Step-by-Step Guide for Beginners
If you’ve chosen your first bot and you’re ready to connect it to your exchange — this guide is your next step.
To let a trading bot operate on your Binance account, you need to create something called an API key. Don’t let the technical term intimidate you. By the end of this guide, you’ll understand exactly what it is, why it’s safe, and how to set one up correctly in about 10 minutes.
What Is an API Key and Why Do You Need One?
Let’s start with the basics.
API stands for Application Programming Interface. In simple terms, it’s a way for two pieces of software to talk to each other.
When you create an API key on Binance, you’re creating a special access token that allows your trading bot to interact with your Binance account — placing trades, reading your balance, and checking market data.
Here’s the important part: you decide exactly what the API key is allowed to do.
Think of it like giving a trusted employee a key card to your office building. The key card lets them enter the building and do their job — but it doesn’t give them access to the safe, the bank accounts, or anything beyond what they need.
With a correctly configured API key:
- ✅ The bot can read your account balance
- ✅ The bot can place and cancel trades
- ❌ The bot cannot withdraw your funds
- ❌ The bot cannot change your account settings
- ❌ The bot cannot access your email or password
🔒 The golden rule of API keys: never enable withdrawal permissions. Ever. For any bot. On any platform.
Before You Start — What You’ll Need
- ✅ A verified Binance account (identity verification completed)
- ✅ Two-Factor Authentication (2FA) enabled on your Binance account
- ✅ A BitcoinEra account with a bot selected and ready to connect
- ✅ About 10 minutes of uninterrupted time
💡 Don’t have a Binance account yet? Go to binance.com and complete the registration and identity verification process first. This is required before you can create API keys.
Important Security Warning Before We Begin
Please read this carefully before creating your API key.
Never share your API key or Secret Key with anyone — including people claiming to be from BitcoinEra support, Binance support, or any other platform. Legitimate support teams will never ask for your API credentials.
Never take a screenshot of your Secret Key and store it in an insecure location like your phone’s photo gallery, a messaging app, or an unencrypted notes app.
Create a separate API key for each bot — don’t reuse the same key across multiple bots or platforms. This way, if you ever want to disconnect a specific bot, you can delete just that key without affecting anything else.
Step-by-Step: Creating Your Binance API Key
Step 1 — Log In to Your Binance Account
Go to binance.com and log in with your email and password. Complete your 2FA verification when prompted.
Step 2 — Go to Your Account Settings
Once logged in, look for your profile icon in the top right corner of the screen. Click on it to open the dropdown menu.
From the dropdown, select “Account” or look for the “API Management” option directly.
Alternatively, you can navigate directly by going to: binance.com/en/my/settings/api-management
Step 3 — Open API Management
You’ll see the API Management page. This is where all your API keys are created and managed.
If you’ve never created an API key before, the page will be empty — that’s completely normal.
Click the button that says “Create API”.
Step 4 — Choose API Key Type
Binance will ask you what type of API key you want to create. You’ll see two options:
- System generated — Binance creates the key for you automatically
- Self-generated — you provide your own key pair (advanced users only)
Choose “System generated” — this is the correct option for trading bots and is by far the most straightforward approach.
Click “Next”.
Step 5 — Name Your API Key
You’ll be asked to give your API key a label. This is just a name to help you identify it later — Binance doesn’t use it for anything technical.
Use a descriptive name that tells you exactly what this key is for. For example:
BitcoinEra_GridMasterXTradingBot_Binance_2024BitcoinEra_Bot1
This becomes very useful later when you have multiple API keys and need to know which one belongs to which bot.
Click “Next”.
Step 6 — Complete Security Verification
Binance takes API key creation seriously and will ask you to verify your identity before proceeding.
You’ll need to complete:
- Email verification — a code sent to your registered email address
- 2FA verification — a code from your Google Authenticator or Authy app (or SMS if that’s how you set up 2FA)
Enter both codes and click “Submit”.
Step 7 — Your API Key and Secret Key Are Generated
This is the most important moment in the entire process. Pay close attention.
Binance will display two pieces of information:
API Key — a long string of letters and numbers that looks something like this: vmPUZE6mv9SD5VNHk4HlbGtj...
Secret Key — another long string that looks similar: NhqC2TnYi73CmRFRf...
⚠️ CRITICAL: The Secret Key is shown ONLY ONCE. You cannot view it again after closing this screen.
Here’s what you need to do right now:
- Copy the Secret Key immediately
- Paste it into a secure location — we recommend a password manager like Bitwarden or 1Password
- Do the same with the API Key
- Only then close this screen
If you close the screen without saving the Secret Key, you’ll need to delete this API key and create a new one from scratch. The Secret Key cannot be recovered.
Step 8 — Configure API Key Permissions
Now comes the most important security step — setting what your API key is allowed to do.
By default, Binance enables “Read Info” only. You need to add one more permission and make absolutely sure one permission stays disabled.
Enable these permissions:
- ✅ Enable Reading — allows the bot to see your balance and trade history
- ✅ Enable Spot & Margin Trading — allows the bot to place and cancel trades
Leave these permissions disabled:
- ❌ Enable Withdrawals — NEVER enable this. Ever.
- ❌ Enable Futures — only enable if you are specifically using a futures trading bot and you fully understand futures trading
- ❌ Enable Margin — only enable if your specific bot requires it
🔒 Withdrawal permission disabled = your funds can never leave your account through the API. This is your most important safety net.
After selecting the correct permissions, click “Save” and complete another round of security verification.
Step 9 — Restrict API Access by IP Address (Optional but Recommended)
This is an advanced security step that most beginners skip — but it’s worth knowing about.
Binance allows you to restrict your API key so it can only be used from specific IP addresses. This means even if someone stole your API key, they couldn’t use it unless they were connecting from your approved IP address.
How to set it up:
- In the API settings, look for “Access Restriction” or “IP restriction”
- Select “Restrict access to trusted IPs only”
- Enter the IP address of the server running your bot
Important: If your bot runs from a cloud server with a fixed IP address, this is highly recommended. If your bot runs from your home computer and your home IP address changes regularly, skip this step for now — otherwise your bot will stop working every time your IP changes.
Step 10 — Connect Your API Key to BitcoinEra
Now that your API key is created and configured, it’s time to connect it to your chosen bot on BitcoinEra.
- Log in to your BitcoinEra dashboard
- Navigate to the bot you want to connect
- Click “Connect Exchange” or “Add API Key”
- Select Binance from the exchange dropdown
- Paste your API Key in the first field
- Paste your Secret Key in the second field
- Click “Connect” or “Save”
BitcoinEra will immediately verify that the connection is working by reading your account balance. If everything is correct, you’ll see a green confirmation message and your account balance will appear.
How to Check That Everything Is Working
After connecting, give it a few minutes and then check the following:
In your BitcoinEra dashboard:
- Your Binance balance should be visible
- The bot status should show as “Connected” or “Active”
- No error messages should appear
In your Binance API Management page:
- The API key should show recent activity in the “Last Used” column
- No unusual activity or unauthorized access attempts
What to Do If Something Goes Wrong
“Invalid API Key” error
- Double-check that you copied the API Key and Secret Key correctly — no extra spaces at the beginning or end
- Make sure you’re using the right key for the right exchange (Binance keys don’t work on Bybit, for example)
- Verify that you enabled “Spot & Margin Trading” permission on the key
“Insufficient permissions” error
- Go back to Binance API Management and check that “Enable Spot & Margin Trading” is enabled
- Save the settings and try connecting again
“IP address not allowed” error
- You’ve set up IP restriction but the bot’s server IP isn’t on the approved list
- Either add the correct IP address or remove the IP restriction temporarily
Secret Key is lost
- Unfortunately there’s no way to recover a lost Secret Key
- Delete the existing API key from Binance API Management
- Create a brand new API key from scratch following this guide again
- Connect the new key to BitcoinEra
How to Delete or Disable an API Key
If you want to stop a bot or disconnect it from Binance, here’s how:
- Go to binance.com/en/my/settings/api-management
- Find the API key you want to remove
- Click “Delete” next to it
- Complete the security verification
Once deleted, the bot will immediately lose access to your account. Your funds are completely unaffected — they remain in your Binance account as normal.
Quick Reference — Correct API Permissions
Print this or save it somewhere accessible:
| Permission | Should Be Enabled? |
|---|---|
| Enable Reading | ✅ Yes |
| Enable Spot & Margin Trading | ✅ Yes |
| Enable Withdrawals | ❌ Never |
| Enable Futures | ⚠️ Only if your bot requires it |
| Enable Margin | ⚠️ Only if your bot requires it |
| Enable Options | ❌ No |
Summary
Here’s what we covered in this guide:
- What an API key is and why it’s safe when configured correctly
- How to navigate to Binance API Management
- How to create a new API key with the correct name
- How to complete Binance security verification
- How to save your Secret Key safely — before closing the screen
- Which permissions to enable and which to never touch
- How to connect your API key to BitcoinEra
- How to troubleshoot common connection errors
⚠️ Risk Disclaimer: Trading cryptocurrencies involves significant risk of financial loss. Never enable withdrawal permissions on any API key connected to a trading bot. Past performance of any trading bot does not guarantee future results. Never invest more than you can afford to lose.
