Create a trade-only Bybit API key

Before you start

• Use a Unified Trading Account (UTA). Bybit's Demo Trading only exists in UTA mode.
• Turn on Google Authenticator. Bybit asks for a code when you create the key.
• Brand-new Bybit accounts can't create keys for their first 48 hours.
• Make keys on bybit.com, not testnet.bybit.com. Testnet is a different place from Demo Trading.

Create a key for live trading (Production)

1. 01

   Open API Management

   On the Bybit website (not the app), hover your profile icon and choose API.

2. 02

   Create a new key

   Click Create New Key and choose System-generated API Keys.

3. 03

   Set the permissions

   Choose API transaction, set Read-Write, and tick only Contract → Orders and Contract → Positions.

4. 04

   Choose the IP setting

   Choose No IP restriction for now. Bybit expires a key with no IP bound after 90 days; you can extend it from API Management.

5. 05

   Confirm

   Enter your Google Authenticator code, then Next Step.

6. 06

   Copy the key and the secret

   Bybit shows the secret only once. Paste both into TradeSurge straight away (see Connect an account).

Create a key for Bybit Demo Trading (Demo)

1. 01

   Switch to Demo Trading

   Log in on bybit.com, hover your profile icon and choose Demo Trading. It's a separate account with its own UID.

2. 02

   Open API while still in Demo

   Hover your profile icon → API → Create New Key → System-generated API Keys.

3. 03

   Set the same permissions

   Read-Write with Contract → Orders and Positions only.

4. 04

   Copy the key and the secret

   A demo key only works in TradeSurge's Demo environment; a live key only in Production.

Tick

• Tick: Read-Write
• Tick: Contract → Orders
• Tick: Contract → Positions

Leave off

• Leave off: Wallet → Withdrawal
• Leave off: Wallet → Account Transfer
• Leave off: Wallet → Subaccount Transfer
• Leave off: Spot, Options, Exchange, Earn, Copy Trading, NFT and Affiliate

Keeping the key alive

A key with no IP bound expires after 90 days. To extend it, open API Management on Bybit, edit the key, keep No IP restriction and submit with your email and authenticator codes. TradeSurge shows each key's age and warns you before it runs out.

Removing the key

On Bybit, open API Management and delete the key; TradeSurge loses access at once.

In TradeSurge, open Copy trading, select the key under Broker connections and revoke it. The encrypted copy is deleted from our servers, not just switched off.