Sign up

Security

Your keys, your exchange, your funds

Bitlot trades through a trade-only API key on your own exchange account. It never holds your trading funds and can never withdraw from your exchange account.

Trade-only API keys

When you link a key, Bitlot checks its permissions. A key that can withdraw is detected and refused, and linked keys are re-checked regularly.

Your trading funds stay on your exchange

Positions and balances live in your own exchange account. Bitlot can place and close trades, but it cannot move money out of your exchange account.

Encrypted secrets, isolated trading gateway

API secrets are encrypted at rest. Only a separate trading gateway service can use them, so the rest of the platform never sees your keys.

IP-restricted keys

You restrict each key to Bitlot’s IP addresses, so even a copied key is useless from anywhere else.

Account security

Protect your Bitlot login with two-factor authentication, or sign in with Google.

The fuel balance

Bitlot does hold your prepaid fuel balance, the balance that fuel fees are taken from. It is separate from your trading funds and your exchange account, and unused fuel can be withdrawn.

Demo account. Illustrative only.

Security questions

No. Your trading funds stay in your own exchange account. Bitlot only uses an API key with trading permission, and it rejects any key that can withdraw.

No. Bitlot never asks for withdrawal permission and refuses to link a key that has it. Keys are re-checked regularly.

Start automating on your own account

Create your free account

Free to sign up · No subscription · Trade-only API keys