How to create a read-only Binance API key
Make a Binance API key that can only read: the permissions to turn on and off, how to lock it to one IP address, and how to connect it to a portfolio tracker.
Updated Nov 8, 2026
In short
In Binance's API Management, create a key, leave only reading turned on, keep trading and withdrawals off, and restrict it to the IP address your tracker gives you. Paste the API key and secret key into the tracker. A key like this can show your balances and history but can't place an order or move a coin, and you can delete it on Binance at any time.
To see your Binance balances anywhere outside Binance, such as a portfolio tracker or a tax tool, you give it an API key. The key decides what that app can do. Made carefully, it can read everything and do nothing else. This guide makes that kind of key, and takes about a minute.
What a read-only key can and can't do
A read-only key lets an app see your balances across spot, funding and earn, your open positions and your history. It can't place, change or cancel an order, and it can't withdraw or transfer anything. Burokku checks this when you connect and turns away any key that can trade or withdraw.
Before you start
Your Binance account needs two-step verification turned on; Binance asks you to confirm with it when you create a key. Have the app you're connecting open too, so you can paste the key straight in.
Step 1: open API Management
On binance.com, open your profile menu and choose API Management, or go to
binance.com/en/my/settings/api-management.
Step 2: create a key
Choose Create API and give the key a name you'll recognise later, such as Burokku. If Binance asks for a key
type, choose the system-generated one: it gives you an API Key and a Secret Key, which is what Burokku asks
for. Confirm with your two-step verification.
Step 3: leave only reading on
In the key's restrictions:
- Enable Reading: on. It's required.
- Enable Spot & Margin & Stocks Trading: off.
- Enable Withdrawals: off.
Leave every other permission off too. Binance may label these slightly differently over time; the rule is the same: reading on, everything else off.
Step 4: lock it to Burokku's IP address
Choose the option to restrict access to trusted IPs only, and paste the IP address Burokku shows you when you connect. Burokku reads exchanges from that one fixed address, so the key works only from there, and a copy of it is useless anywhere else.
Step 5: connect it
In Burokku, choose Add account, then Binance, and paste the API key and the secret key. Burokku checks the key is read-only, reads your spot, funding and earn wallets, and asks you to name the account and pick a bundle. The key is sealed on our servers in a space that belongs to your account alone, and never reaches a browser. The secret key is shown only once on Binance, so if you lose it, delete the key and make another.
Questions
- Is a read-only API key safe?
- It's the safest kind of key there is: it can't trade or withdraw. Locking it to one IP address means a copy of it is useless anywhere else. Keep the secret key private all the same, and delete any key you no longer use.
- Do I need a key for each Binance sub-account?
- Yes. Each key reads only its own account, so make one for each sub-account and add each to Burokku, which keeps them together and counts each once.
- Does this work for other exchanges?
- The idea is the same on OKX, Bybit, Coinbase, Kraken and the rest, though the labels differ. Burokku walks you through each exchange's own screens when you connect it.
- How do I disconnect it?
- Delete the key in Binance's API Management. It stops working at once, wherever it was used. You can also remove the account in Burokku.