How to Connect Your LBank API Key Safely (Step-by-Step)
Connecting an LBank API key to a trading cockpit takes about five minutes, and the settings you choose during those five minutes determine how safe your funds are. The short version: create a trade-only key (no withdrawal permission), whitelist the IP of the tool that will use it, copy the secret the moment it's shown, and connect it to a cockpit that stores the secret encrypted in your browser. This guide walks through each step.
Disclaimer: Educational content, not financial advice. Protect your API credentials like passwords — anyone with a withdrawal-enabled key and secret can move your funds.
Before you start
You'll need an LBank account with futures enabled, and the trading tool you intend to connect (this guide uses FinGen as the example). Keep the connect screen open in one tab — for IP-restricted keys you'll need the server IP address it displays.
Step 1 — Create the API key on LBank
- Log in to LBank and open Account → API Management.
- Create a new API key.
- Set permissions: enable Read and Trade (including futures/perpetual). Leave Withdrawal OFF.
- Save. LBank shows the API key and the secret.
Copy the secret now. The secret is displayed only once. If you lose it, you must delete the key and create a new one.
Step 2 — Set the IP whitelist
LBank binds API keys to the IP address that calls them. You have two safe options:
- Whitelist the tool's server IP. A multi-tenant cockpit sends orders from its own server, so paste that server's IP into LBank's IP-restriction field — not your home IP. FinGen displays the exact IP to whitelist on the connect screen.
- Use a no-IP-restriction key. Simpler, and works across both spot and futures, but the key is usable from anywhere it leaks — so the trade-only permission becomes your main safeguard.
Important nuance: LBank keeps separate IP whitelists for spot and futures. Whitelisting for one does not automatically cover the other. If futures orders fail signature checks, confirm the futures whitelist specifically.
Step 3 — Connect it to the cockpit
In FinGen's Add account screen:
- Choose LBank as the exchange.
- Give the account a label (e.g. "LBank — main").
- Paste the API key and secret.
- Click Test & save.
FinGen encrypts the secret in your browser using a non-extractable key and stores only an encrypted reference. The secret never reaches FinGen's server — orders are signed locally and forwarded. Read more about why that model matters in what a multi-exchange trading cockpit is.
Step 4 — Verify it works
A good "Test & save" does a read call (balance/permissions) and reports status. You want to see:
- Connected status with your balance.
- Trade permission present.
If you then want to trade several accounts together, see fan-out trading.
Troubleshooting common LBank API errors
| Symptom | Likely cause | Fix |
|---|---|---|
10007 Invalid signature | Wrong secret, or request from a non-whitelisted IP | Re-paste the secret; whitelist the tool's server IP for the right market |
| Orders read but won't place | Trade permission missing, or futures whitelist not set | Enable trade permission; whitelist the futures IP specifically |
| Leverage doesn't apply | Leverage set on the wrong direction/bucket | Use a cockpit that sets leverage for the order's own direction before placing |
| Works on spot, fails on futures | Separate spot/futures whitelists | Add the IP to the futures whitelist too |
Security checklist
- Withdrawal permission is OFF.
- IP whitelist set to the tool's server IP (or deliberately using a no-IP key).
- Secret copied at creation and stored in a password manager.
- Connected to a cockpit that keeps the secret client-side, encrypted.
- You can revoke the key from LBank at any time if something looks wrong.
Key takeaways
The safest LBank API key is trade-only and IP-restricted, connected to a tool that keeps your secret encrypted in your browser. Those three choices mean that even in a worst-case leak, the key cannot withdraw your funds and cannot be used from an unauthorized location. Set it up once, correctly, and you can trade with confidence. Open the FinGen cockpit to connect your first LBank account.
Frequently asked questions
What permissions should an LBank trading API key have?
Why does the key need an IP whitelist?
Does FinGen see my API secret?
I got error 10007 'Invalid signature' — what's wrong?
FinGen is a multi-exchange cockpit: connect your own API keys and fan one order across all your accounts — keys stay encrypted in your browser.
Open the cockpit →This article is for general information only and is not financial, investment, legal, or tax advice. Crypto and leveraged perpetual futures carry a high risk of loss. Do your own research and never trade more than you can afford to lose.