Connect your exchange (API keys)
To run a bot or copy a leader, the platform needs a read+trade API key from your exchange. We never see your password and we cannot withdraw funds.
An API key is a long random string that lets one app place trades on your behalf — but only the actions you allow. Always disable withdrawal permission, and ideally set an IP allowlist.
Binance Spot — API key in 5 steps
Overview Spot trading on the world's largest exchange. Pair a system-generated key with an IP allowlist for the safest setup.
- 1Log into binance.com
Use the account you want the bot to trade from. If this is for testing, create a sub-account first under "Account → Sub Accounts".
- 2Go to API Management
Profile icon (top right) → "API Management". Pass any 2FA / email checks Binance asks.
- 3Create a new API key
Choose "System generated". Give it a memorable label like "EpochalQuant". Save the API Key and Secret — the secret is only shown once.
- 4Set permissions
Enable: ☑ "Enable Reading" and ☑ "Enable Spot & Margin Trading". Disable: ☐ "Enable Withdrawals". Optional but recommended: add an IP allowlist.
- 5Paste into EpochalQuant
On the dashboard → "Connect exchange" → choose Binance Spot → paste the API Key and Secret. Save. You're done.
Security checklist
- Never enable Withdraw permission — only Read and Trade.
- Set an IP allowlist if your exchange supports it; you'll see our outbound IPs on the Connect screen.
- Use a dedicated sub-account or portfolio for the bot when the exchange supports them. Limits blast radius.
- Rotate keys every 60–90 days. Revoke immediately if a device is lost or compromised.
- We store keys encrypted (AES-256-GCM). Your secret is never logged or shown again after you save it.