Quick Answer: The API Is Binance's Official Interface for Code or Third-Party Tools to Control Your Account
If you want to run automated trading, connect a third-party bot, or wire your Binance account into a portfolio-management tool, the API (Application Programming Interface) is the path you have to take. This article doesn't teach you how to code — it just explains "what it is, whether you should use it, and how to enable it." First finish registering on Binance and complete KYC, because the App can only view API Keys — creation must be done on the web.
What Is an API?
In short, the API is a set of "machine-readable interfaces" Binance provides. Your program can use them to check balances, place orders, cancel orders, fetch market data, etc. — exactly the same actions you'd do manually on the web/App. The only difference is that the actor switches from "your fingers" to "your program."
Who Actually Needs the API
Quant Traders
Strategy code that runs on its own — the API is mandatory, with no substitute.
Third-Party Bot Users
Tools like 3Commas, Bitsgap, Hummingbot, and Cryptohopper control your Binance account through the API — you have to give them an API Key for them to do anything.
Portfolio Trackers
Aggregators like CoinStats, Delta, and Kubera read your balance and trade history through the API. They only need read-only permissions and won't touch your assets.
Arbitrageurs
Cross-exchange arbitrage, triangular arbitrage, and similar strategies need millisecond reaction times — only the API can deliver that.
People Who Don't Need the API
If you just trade casually, DCA, or occasionally try a small futures position, the App + web is plenty — there's no need to mess with the API. The API adds a layer of security risk; if you don't need it, don't enable it.
How to Create an API Key
Prerequisites
- KYC Intermediate or above completed
- Google Authenticator (TOTP) bound
- Account security settings fully configured
Creation Steps
- Sign in to Binance from a desktop browser (you can't create on the mobile App, only view)
- Top-right avatar → API Management
- Choose API type:
- System generated: Binance generates the key pair, the Secret can never be viewed again, you must save it immediately.
- Self generated: you generate an ED25519 key pair locally and paste the public key in. This way the Secret never leaves your machine, which is more secure.
- Name the key (e.g., "trading-bot-1")
- Security verification (email + phone + Google code)
- Save both API Key and Secret Key immediately after creation
System-generated vs Self-generated — How to Choose
- Using a third-party bot or quant platform: pick System generated and paste the keys into the bot's config
- Writing your own code with maximum security: pick Self generated so the Secret never reaches Binance
Permission Settings (the Most Critical Step)
Binance APIs have several permission tiers — open exactly what you need:
1. Enable Reading
Read balances, orders, history. Enabled by default for all keys, can't be disabled.
2. Enable Spot Trading
Allows spot orders. Don't enable for portfolio tracking or pure read-only use.
3. Enable Futures
Allows futures account operations. Highest risk — only enable if you definitely intend to automate futures.
4. Enable Withdrawals
The most dangerous permission. Unless you 100% trust the consumer and absolutely need it, never enable this. The vast majority of third-party tools don't need this permission.
5. Enable Margin
Allows margin borrowing and trading. Don't enable if you're not running margin strategies.
Golden Rule: Least Privilege
Both the permissions and the funds tied to an API Key should be the absolute minimum. Portfolio trackers get read-only; bots get spot trading only; never enable withdrawals without IP restrictions.
IP Whitelist (Strongly Recommended)
You can restrict an API Key to accept requests from specific IPs:
- Find the API Key in API Management
- Edit Restrictions
- Restrict access to trusted IPs only
- Enter your server's static IP
Once IP-locked, even if the API Key leaks, the attacker can't use it to operate your account. This is the core defensive layer for API security. Home broadband IPs change frequently, so use a cloud server with a static IP.
Common API Limits
Rate Limits
There are caps on requests per minute and per second — exceeding them gets you a temporary ban (HTTP 429). Normal strategies won't hit these; high-frequency strategies need careful optimization.
Per-Order Min/Max
Different coins have different per-order min/max amounts — check the trading rules (the exchangeInfo endpoint) before placing.
Withdrawal Limits
Even with withdrawals enabled, there's still a 24-hour cumulative cap, tied to your KYC tier.
Third-Party Bot Safety Checklist
If you're going to give your API Key to a third-party platform, confirm:
- Platform reputation: pick the big ones (3Commas, Bitsgap, Hummingbot) — don't hand keys to obscure unaudited platforms
- Developer identity: verify on GitHub and official communities
- Minimum permissions: enable only what they need
- IP-bind: confirm the platform has a fixed IP and lock it
- Trial with small capital: start with 100–500 USDT for two weeks of observation
- Regular review: check API usage logs monthly
- Revoke promptly: delete keys you no longer use
Binance has repeatedly emphasized: customer support never asks users for API Keys. Anyone "from support" asking for your Key is a scammer.
What to Do If an API Key Is Leaked
Immediate Actions
- Delete the API Key immediately (API Management page → Delete)
- Check for unusual recent orders and withdrawals
- Check whether your balance has been moved
- Change your password and reset 2FA
Damage Is Limited Without Withdrawal Permission
If withdrawals were never enabled, even a leaked key can at worst be used to "wash trade" or cause slippage losses — the attacker can't move your coins out. This is exactly why withdrawal permission must be treated with extreme caution.
Common Questions
Is the API paid?
No. API calls are free; trading orders are charged at standard rates, with VIP tiers and BNB discounts still applying.
Are there VIP advantages for the API?
Yes. Higher VIP tiers get higher API rate limits and better futures margin terms — power users have a real reason to climb VIP tiers.
Are API order fees the same as manual order fees?
Exactly the same. Binance does not differentiate by order source — fees depend only on VIP tier, BNB discount, and maker/taker type.
How many API Keys can I have?
A Binance master account can create up to 30 API Keys. We recommend separating them by purpose (one bot = one Key) for easier debugging.
Can I use the API if I can't code?
Yes. You don't need to know programming to use API features through third-party tools — paste your API Key into a graphical platform like 3Commas or Bitsgap and the bot runs for you.
The API is a double-edged sword — used right, it makes you ten times faster than manual trading; used wrong, you can be wiped out overnight. If you're a beginner just curious, start with a read-only key paired with a portfolio tracker. Once you're comfortable, then consider trading permissions.
Get Started Now
Ready to begin? Sign up for Binance now and enjoy exclusive trading fee discounts.
Or download the Binance app and manage your crypto on the go.