Account Security
Binance API Key Kisi Ko Dena Chahiye? Permissions, IP Restriction Aur Safai Ka Waqt
Koi kehta hai Binance par API key bana kar de dein, paisa aap hi ke account mein rahega? Official page ke mutabiq API key se kya kuch ho sakta hai, permission aur IP restriction ki do pakki sharait, Secret Key sirf ek dafa kyun nazar aati hai, aur ghair zaroori keys kab hatani chahiye.
Koi aap se kehta hai ke "bas Binance par ek API key bana kar mujhe de dein, paisa to aap hi ke account mein rahega" — sunne mein risk kam lagta hai, lekin yeh baat aadhi sach hai. Paisa account mein rahega ya nahi, yeh is par hai ke aap ne kaun si permissions on ki aur IP restriction lagayi ya nahi. Yeh dono cheezein Binance ke official page par saaf likhi hain.
Upar wali tasveer Binance ke page "How to Create API Keys on Binance?" ka upper hissa hai. Page par Published on 2018-04-08 aur Last updated: 20 March 2025 likha hai; humne 2026-09-26 ko har point check kiya.
API key se kya kuch ho sakta hai
Official page ka jumla hai: "You can view your wallet and transaction data, make trades, and deposit and withdraw funds in third-party programs."
Matlab API key ek aisi chaabi hai jo password aur 2FA ke baghair account par kaam karti hai. Jab koi program is key se request bhejta hai, Binance dobara 2FA nahi maangta. Kitna kuch ho sakta hai, woh sirf un permissions par depend karta hai jo key banate waqt tick ki gayi thin.
Isi page par teen sharait bhi likhi hain jo API key banane se pehle poori karni hoti hain:
- Account par 2FA enable hona chahiye
- Spot Wallet mein koi bhi amount deposit kar ke account activate hona chahiye
- Identity verification (KYC) mukammal honi chahiye
Is liye "aap ko password dene ki zaroorat nahi, sirf API bana dein" wali baat ka matlab yeh hai ke account pehle poora bana aur fund bhi hona chahiye, tab hi key ban sakti hai.
Binance khud do jagah rok laga deta hai
Upar isi page ka pehla sawal hai: "Why can't I enable any permission other than reading?" Jawab yeh hai: "We strongly recommend against enabling API keys for permissions other than reading without defining the appropriate IP access restrictions ('Unrestricted-IP-Access API Key(s)'). Unrestricted-IP-Access HMAC API Key(s) won't have any permission other than reading."
Is mein doosri line zyada ahem hai: yeh sirf mashwara nahi, system ki rok hai. Agar aap ne system-generated (HMAC) key banayi aur IP restriction nahi lagayi, to woh key sirf data parh sakti hai — order tak nahi laga sakti.
Doosri rok isi page ke doosre sawal mein hai:
Adding IP access (IPv4 format) restrictions is mandatory to enable withdrawal permission.
Yani bina IP restriction wali key par withdrawal permission mumkin hi nahi. Page aage yeh date bhi deta hai: "Effective from 2023-01-30 00:00 (UTC), the system-generated API Key's permission can only be set to [Enable Reading] if your IP is unrestricted."
Asaan lafzon mein iska matlab
Jab koi aap se key maangta hai, teen mein se ek surat banti hai:
| Aap ne jo key di | Doosra banda kya kar sakta hai | Aap par risk |
|---|---|---|
| IP restriction ke baghair, system-generated | Sirf balance aur trade history parhna | Aap ki holdings aur record leak |
| IP restriction ke saath, trading permission on | Aap ke paise se order aur convert | Loss ho sakta hai, asset account hi mein rehta hai |
| IP restriction ke saath, withdrawal permission on | Coins nikal sakta hai | Asset account se bahar ja sakta hai |
Darmiyani row ghaur se dekhein: "coin account se bahar nahi jaata" ka matlab yeh nahi ke paisa kam nahi hoga. Kam liquidity wale pairs mein baar baar order laga kar bhi asset khatam ho sakta hai, aur yeh saare orders aap hi ke account se normal tareeqe se jaate hain — baad mein unhein unauthorized sabit karna mushkil hota hai.
Agar aap ka maqsad sirf portfolio ya return dekhna hai, to reading permission kaafi hai; trading ya withdrawal permission ki bilkul zaroorat nahi. Aur fees ka hisab dekhne ke liye bahar ka tool chahiye hi nahi — Binance ka apna statement kaafi hai, tafseel Binance spot trading fee ka hisab mein hai.
Official screen par likhi chaar lines
Yeh official page ke andar di gayi App wali screen hai. Baain taraf ki chaar lines parhne layak hain: har account zyada se zyada 30 API keys bana sakta hai; API Key, Secret Key (HMAC) ya Private Key (Ed25519, RSA) kisi ko na batayein warna asset ka nuqsan ho sakta hai aur inhein password ki tarah treat karein; sirf trusted IPs tak access mehdood karna behtar hai; KYC mukammal na ho to API key ban hi nahi sakti.
Daain taraf permission list hai (Reading, Spot & Margin Trading, Margin Loan Repay & Transfer, Futures, Internal Transfer, Universal Transfer, Withdrawals, Symbol Whitelist) aur IP access restrictions ke options. Red box wali warning ka matlab: agar IP unrestricted hai aur reading ke ilawa koi permission on hai, to yeh key delete kar di jayegi.
Ek aur baat "Frequently Asked Questions on API" page par hai: Secret Key sirf key banate waqt ek dafa nazar aati hai, us ke baad hamesha masked rehti hai, aur kho jaye to nayi key hi banani parti hai. Is liye jo bhi aap se kehta hai "woh lambi string copy kar ke bhejein", woh aisi cheez maang raha hai jo wapas nahi li ja sakti. Isi page par third-party services ke baare mein Binance ka jumla bhi saaf hai: "In addition, it is a security risk to enter your Binance API Key(s) and/or Secret Key(s) into any third-party platform. Please use these services at your own discretion."
API keys kab saaf karni chahiye
"Binance Account Security Tips" page par API ke baare mein poora paragraph yeh hai:
Keep your API keys safe as if they are your password. Never share your API key to third parties. Remove any unused or unnecessary API access. Do not add any API keys if you are not sure what they mean to you.
Aakhri do lines aksar nazar andaz ho jaati hain. Yeh mauqe khaas taur par [Account] → [API Management] kholne ke hain:
- Kisi bot ya charting tool ko try kar ke chhor diya tha
- Network ya server badal gaya aur purani IP ab aap ki nahi rahi
- Aisi trade ki notification aayi jo aap ne nahi ki
- Account ka security round abhi kiya hai (password badla, 2FA reset kiya)
Aakhri baat: API FAQ page kehta hai ke account disable karne se tamam valid API keys delete ho jaati hain. Yeh us tarteeb se milta hai jo masla hone par official page deta hai — pehle account disable, phir baqi kaam. Woh tarteeb aur us ki wajah ajnabi login par account disable karne wali guide mein hai. Account disable karna sirf login nahi rokta, program wali access bhi kaat deta hai.
Agar aap ka asal darr yeh hai ke coins nikal liye jayenge, to API permissions se pehle withdrawal whitelist set karna zyada kaam ka hai — phir account sirf aap ke apne address par hi withdraw kar sakega.
Aam sawalat
Kya API Key ke saath password bhi chahiye hota hai? Nahi. API key khud hi credential hai; program us se request bhejte waqt password ya 2FA nahi maangta. Kitna kuch ho sakta hai yeh sirf permission aur IP restriction par hai.
Secret Key note nahi ki, kya dobara dekh sakte hain? Nahi. Official page ke mutabiq Secret Key sirf banate waqt nazar aati hai; kho jaye to nayi key aur nayi Secret Key banani hogi.
Meri API key achanak ghayab ho gayi? API FAQ page do wajah deta hai: ek, agar aap ne haal mein key use nahi ki aur API sirf 7 March 2018 se pehle chalayi thi, to security ke liye key purge ho sakti hai; do, account kabhi disable hua ho to tamam valid keys delete ho jaati hain. Nayi bana lena kaafi hai.
Kya Binance support call kar ke API key banwata hai? Nahi. "Binance Account Security Tips" page saaf likhta hai ke Binance kabhi call nahi karta aur WhatsApp ya kisi social media par message nahi bhejta. Aise call par foran phone rakh dein; pehchan ka tareeqa crypto phishing scams ki checklist mein hai.
Official maakhiz
Is tehreer ke facts neeche diye Binance official pages se hain, sab 2026-09-26 ko check kiye gaye:
- How to Create API Keys on Binance? (page par Published on 2018-04-08, Last updated: 20 March 2025)
- Frequently Asked Questions on API (page par Published on 2018-06-05, Last updated: 13 Jan 2025)
- Binance Account Security Tips (page par sirf Published on 2018-01-18 likha hai, update date nahi)
Yeh site independent guide hai, Binance ki official website nahi. Interface aur rules version ke saath badal sakte hain; kaam karte waqt apne account par jo screen nazar aaye usi ko final samjhein.