To trade for you, a bot needs an API key from your exchange. The key is like a badge: it defines exactly what the bot is allowed to do. Configured correctly, it lets the bot trade and nothing else.
1. Withdrawals always off
This is the rule that matters most. With withdrawals disabled, nobody holding the key can send your coins out of the exchange, not even the platform that received it. Any service asking for a key with withdrawal permission should be refused.
2. Locked to a trusted IP
Binance lets you restrict a key to specific IP addresses. When the key only works from the bot server, a leaked copy is useless on any other computer. Resolutes gives you its server address during setup.
3. Only the permissions needed
For spot trading, the bot needs to read the account and place spot orders. Margin, futures and transfers between accounts stay off unless the strategy truly requires them.
Step by step on Binance
- Go to Account, then API Management, and create a new key.
- Keep Enable Reading on and turn on spot trading.
- Leave Enable Withdrawals off.
- Choose Restrict access to trusted IPs only and paste the server IP.
- Copy the key and the secret into the Resolutes dashboard.
Exchange menus change from time to time. If a label looks different, the principle stays the same: trading on, withdrawals off, IP locked.
How to disconnect
Deleting the key at the exchange cuts access immediately. You do not depend on the platform to stop: the control is always in your hands.