Use a dedicated key
Create a separate key for portfolio viewing. Do not reuse credentials from a trading bot or another service.
How to create a Binance.com read-only API key
This app connects to api.binance.com, not Binance.US. Use the smallest possible permission set: reading on and every asset-moving permission off.
Reading onlyNo tradingNo withdrawalsReview regularly
Before you create the key
An API key and secret act like credentials. A read-only configuration limits their power, but they still deserve careful handling.
Reading only
A balance tracker needs permission to read account data—not permission to place orders, transfer funds, or withdraw.
Review before saving
Confirm every trading, margin, futures, universal-transfer, and withdrawal switch remains disabled.
Treat the secret as sensitive
Do not email, message, screenshot, or publish the secret. Binance may show it only once during creation.
Revoke when unused
Remove keys you no longer use and revoke one immediately if you suspect that it was exposed.
Harden the account and key
Use strong account 2FA, apply an IP allowlist where practical, rotate the key periodically, and verify current Binance.com guidance.
Step-by-step setup
- 1
Open Binance API Management
Sign in through the official Binance.com website, open your account settings, and locate API Management. This app does not support the separate Binance.US API.
- 2
Create and name a new key
Choose the standard account API option available to you, complete Binance security verification, and give the key a recognizable name such as Portfolio Tracker.
- 3
Set the restrictions
Enable reading only. Keep Spot and Margin Trading, Futures, Universal Transfer, withdrawals, and any other asset-moving permission disabled.
- 4
Copy the key and secret safely
Copy the values directly into the app. Avoid saving the secret in notes, chat, email, screenshots, or unencrypted documents.
- 5
Test and compare balances
Connect the key and compare the resulting Spot and eligible Simple Earn balances with Binance before relying on the view.
- 6
Review, rotate, and revoke
Periodically review and rotate active keys. Use an IP allowlist if it is compatible with the networks your phone uses. Revoke the key when you stop using sync or suspect exposure.
A portfolio viewer does not need control of your assets
Do not enable trading, margin trading, futures, withdrawals, transfers, or any permission that can place an order or move funds. Crypto Portfolio Tracker only needs the account-reading access required to retrieve supported balances.
After connecting
- Compare the first imported balance with Binance.
- Keep official Binance records for trades and taxes.
- Use strong Binance account 2FA.
- Consider an IP allowlist, noting that mobile network changes can interrupt access until the allowlist is updated.
- Review and rotate the key periodically.
- Remove the in-app connection before revoking the key.
If the secret is exposed
- Revoke the key in Binance immediately.
- Remove the corresponding connection from the app.
- Review Binance security and account-access logs.
- Create a new dedicated read-only key only if needed.
Binance is a trademark of its respective owner. This independent guide is not endorsed by or affiliated with Binance. For more detail, read the site’s security page.
Frequently asked questions
Which Binance permissions should a portfolio tracker have?
Reading only. Trading, margin, futures, transfers, and withdrawals should remain disabled. If an unrelated tracker demands asset-moving permission, do not connect it.
Should I reuse an API key from a trading bot?
No. Create a separate key with the minimum permissions required for each service. This makes the key easier to audit and revoke without interrupting other tools.
Why does my Binance key fail to connect?
The key may be inactive, expired, revoked, restricted by region or IP settings, or missing read access. Check Binance’s error message and current API settings; never enable trading or withdrawal access as a workaround.
Can a read-only key eliminate every risk?
No. It substantially limits what the credential can do, but account and portfolio information is still sensitive. Protect the secret, review permissions, and revoke it if exposed.
Keep exploring
Guide
What Is Bitcoin? A Beginner's Guide
How Bitcoin works, why it matters, and how to get started — explained simply.
Read moreGuideWhat Is Cryptocurrency? A Beginner's Guide
Coins, tokens, blockchains, and how crypto actually works — for complete beginners.
Read moreGuideBitcoin Halving Explained
How the halving works, the full schedule, past dates, and what it means for miners.
Read more