How to connect an exchange.
PnL reads your balances and trades straight from the exchange with a read-only API key. Step by step: what the key is, where to get it on each exchange, and what never to turn on.
What an API key is.
An API key is a separate pass for apps that you create yourself in your exchange settings. It has two parts: the API Key and the Secret. It is not your account password: nobody can log in to the exchange with it.
A key has permissions. PnL needs only one: reading, to see your balance, positions and trade history. Never turn on trading, withdrawals or transfers. PnL doesn't need them, and without them even someone who has your key can't trade or move your money.
The key is stored in your iPhone's Keychain and goes only to the exchange itself. Keys never reach our server.
Choose what to connect.
- Binance - a read-only key, on the website or in the Binance app.
- Bybit - a read-only key, on the Bybit website only.
- Gate - an API v4 key with read-only permissions.
- Hyperliquid - no key needed, just the account address.
- Wallets - Bitcoin, Ethereum and other networks: just the public address.
Keys don't last forever.
Bybit and Gate disable keys without an IP restriction after 90 days. A phone can't use an IP-restricted key because its address changes. PnL warns you two weeks ahead. A Bybit key can be extended in a minute; on Gate you need a new key.
Four rules.
- Read-only. If the exchange offers trading, withdrawals or transfers, leave them off.
- PnL will never ask for your exchange password, seed phrase or wallet private key. Never share them.
- Create the key only on the official exchange website. Links are on each exchange page.
- No longer need the key? Delete it on the exchange, in the same API section.