◆

Exchanges

Connect Binance, OKX or Bybit with a read-only API key and import your spot balances. Imported units are booked into your portfolio as deposits, so cost basis, P/L and Activity stay accurate — and syncing again only applies what changed.

Binance

Not connected

Binance → API Management → Create API → enable only “Enable Reading”. Restrict to your IP if you can.

Read-only keys only — never enable trading or withdrawals.

OKX

Not connected

OKX → Profile → API → Create V5 API key → Read Only, and note the passphrase you set.

Read-only keys only — never enable trading or withdrawals.

Bybit

Not connected

Bybit → API → Create New Key → System-generated → Read-Only permission.

Read-only keys only — never enable trading or withdrawals.

Imported balances

Quantities come from the last sync. Prices come from your normal refresh, so the values below move with the market.

Total on exchanges
$0.00
Nothing imported yet. Holdings you add by hand still work as before.

How the keys are handled

  • Keys are stored encrypted (AES-256-GCM) and never leave the server — the browser only ever sees a mask such as ••••••••7F3A.
  • No EXCHANGE_CREDENTIALS_KEY is set, so the encryption key lives in the database itself. Set that variable to protect the keys in a database dump.
  • Only balance-read endpoints are called. Create the key with read-only permission and, where the exchange allows it, an IP allowlist.
  • Disconnecting deletes the key. Holdings it imported stay in your portfolio as normal assets, so nothing silently disappears from your totals.