What is a read-only API key, and how to make one

An API key lets an app talk to your exchange account. Each key has permissions. A read-only key can see your balances, but can't trade, move coins or withdraw. That's the only kind CheckACoin accepts: it asks the exchange what a key can do before saving it, and refuses any key that can do more.

Binance

1. Open API Management in your account settings and create a new API key (system-generated).
2. Leave only “Enable Reading” switched on. Keep trading, transfers and withdrawals off.
3. Optional: restrict it to CheckACoin's IP address, shown in the app, so a copy is useless anywhere else.

Bitget

1. Open API Keys in your account settings and create a system-generated key.
2. Choose read-only permissions and set a passphrase. You'll need the key, the secret and the passphrase.

KuCoin

1. Open API Management and create an API key with a passphrase.
2. Give it the “General” permission only. Leave trading and transfers off.

Exchanges sometimes rename their menus; the permissions to look for stay the same.

After you connect

Your key is encrypted the moment it arrives, and only unlocked inside our server to read your balances. It's never shown or logged; you only ever see its last 4 characters. A key can be connected to only one CheckACoin account. How we protect your key

Not financial advice. CheckACoin shows figures from each coin's own history; it never tells you to buy or sell.