How to create a read-only Bitfinex API key

Open Bitfinex API keys ↗

We checked these steps against Bitfinex's own documentation on 25 September 2026. Bitfinex can rename a button at any time. If a label differs, look for the same permission.

Before you start

• Bitfinex requires two-factor authentication (2FA): a code from an authenticator app or a security key.
• Log in to Bitfinex in this browser and keep your email at hand to confirm the key.
• Create a separate key just for Sovereign. Sharing one with a bot or tax tool causes errors.

Permissions

Turn on only:

• Wallets → wallet balances and addresses (read)
• Margin Trading → position and margin info (read)

Keep these off:

• Withdrawals → create a new withdrawal
• Wallets → transfer between your wallets
• Orders → create and cancel orders
• Margin Trading → claim a position
• Margin Funding → offer, cancel and close funding
• Every other write switch (Account Info, Settings)

Steps

Sovereign connects to Bitfinex from one fixed IP address. The connection form in Sovereign shows it next to these steps, with a copy button.

1. Open Bitfinex's API keys page with the button above and start a new key.
2. Type Sovereign as the key's name and leave the expiry date empty.
3. Under “IP Access restrictions”, choose to restrict access by IP.
4. Delete the IP Bitfinex fills in (your own) and paste Sovereign's IP address.
5. On the next screen, switch off every read permission except wallet balances (“Wallets”) and position and margin info (“Margin Trading”), then continue.
6. On the write permissions, leave every switch off, then click “Generate API key”.
7. Enter your 2FA code, or tap your security key, to confirm.
8. When Bitfinex asks you to check your email, open its confirmation email in this same browser and click “Create API Key”.
9. Copy the API key and the API key secret. Bitfinex shows them only once.
10. Paste them into the API KEY and API SECRET fields in Sovereign, then press “Connect & Sync”.

Where each value goes in Sovereign:

• API key → API KEY
• API key secret → API SECRET

Does a Bitfinex API key expire?

• With an IP restriction: No expiry, as long as “Expiry date” is left empty.
• Without an IP restriction: No expiry, as long as “Expiry date” is left empty.

Bitfinex publishes no clear expiry rule. If the key stops working, Sovereign marks the connection as expired and asks for a new key.

A key only sees the account it was created in: for a sub-account, switch into it, create a key there and add it as a separate connection (skip Paper Trading sub-accounts). Balances on Thalex, a separate derivatives platform, are not included.

If something goes wrong

• If you see a single-page “Create New Key” form: set the same permissions, switch off access from any IP, replace the pre-filled IP with Sovereign's, name it Sovereign, then click “Generate API key”.
• If every sync fails: check that the key's IP box holds Sovereign's IP, not your own address that Bitfinex filled in.
• If balances sync but positions are missing: edit the key's permissions and turn on position and margin info (“Margin Trading”).
• If syncs fail with IP errors although the key is set up right: your account-wide “IP Address Whitelist” (Security page) may be blocking Sovereign, so add its IP there too.

Sources

• support.bitfinex.com/hc/en-us/articles/115003363429-How-to-create-and-revoke-a-Bitfinex-API-Key
• docs.bitfinex.com/docs/requirements-and-limitations
• blog.bitfinex.com/announcements/
• support.bitfinex.com/hc/en-us/articles/213892469