Security Settings Before Creating an API Key
- Enable only Read permission and the required Trade permission.
- Do not enable Withdrawal permission.
- It is recommended to whitelist the server IP addresses provided by NavaX.
- After creating the API, immediately save your API Key, Secret Key, and Passphrase (if applicable). The Secret Key is usually displayed only once.
- If you suspect your credentials have been compromised, delete the API key immediately and create a new one.
Binance
- Log in to the Binance website or app and open your account center.
- Go to API Management and click Create API.
- Choose a system-generated API Key and complete email, phone, or Google Authenticator verification.
- Enable Read permission and the required Spot or Futures trading permissions.
- Add the NavaX IP whitelist and do not enable Withdrawal permission.
- Copy and securely save your API Key and Secret Key, then enter them into NavaX.
Bitget
- Log in to Bitget and open API Keys / API Management.
- Click Create API Key.
- Enter a name, create a Passphrase, and save it securely.
- Enable Read permission and the required trading permissions. Do not enable Withdrawal or unnecessary Transfer permissions.
- Configure the IP whitelist and complete security verification.
- Save your API Key, Secret Key, and Passphrase, then enter them into NavaX.
Bybit
- Log in to the Bybit website and open API Management.
- Click Create New Key.
- Select a system-generated API Key and configure permissions and the IP whitelist.
- Enable Read permission and the required Spot or Derivatives trading permissions. Do not enable Withdrawal.
- Complete 2FA verification and save your API Key and Secret Key.
- Enter the credentials into NavaX.
OKX
- Log in to OKX and open API & Connections from your profile.
- Click Create API Key.
- Enter an API name and select the account and purpose.
- Create and securely save your Passphrase, then configure the IP whitelist.
- Enable Read and Trade permissions. Do not enable Withdrawal.
- Complete verification, save your API Key, Secret Key, and Passphrase, then enter them into NavaX.
HTX
- Log in to HTX and open API Management.
- Click Create API Key and enter a label.
- Enable Read permission and the required trading permissions. Do not enable Withdrawal.
- Configure the IP whitelist and complete security verification.
- Save your Access Key (API Key) and Secret Key.
- Enter the credentials into NavaX.
FAQ
Why is my API invalid?
Make sure your API Key, Secret Key, and Passphrase (if required) are entered correctly. Also verify your IP whitelist, trading permissions, and account type.
Can I use the API of my main account?
Yes. However, using a dedicated sub-account with only the required funds and permissions is strongly recommended.
What should I do if my API credentials are compromised?
Immediately delete the API key from your exchange’s API management page, review your account activity, create a new API key, and update the credentials in NavaX.