FinGen

How to Connect Your LBank API Key Safely (Step-by-Step)

LBank API keyconnect LBank APILBank trading APIAPI key security

Connecting an LBank API key to a trading cockpit takes about five minutes, and the settings you choose during those five minutes determine how safe your funds are. The short version: create a trade-only key (no withdrawal permission), whitelist the IP of the tool that will use it, copy the secret the moment it's shown, and connect it to a cockpit that stores the secret encrypted in your browser. This guide walks through each step.

Disclaimer: Educational content, not financial advice. Protect your API credentials like passwords — anyone with a withdrawal-enabled key and secret can move your funds.

Before you start

You'll need an LBank account with futures enabled, and the trading tool you intend to connect (this guide uses FinGen as the example). Keep the connect screen open in one tab — for IP-restricted keys you'll need the server IP address it displays.

Step 1 — Create the API key on LBank

  1. Log in to LBank and open Account → API Management.
  2. Create a new API key.
  3. Set permissions: enable Read and Trade (including futures/perpetual). Leave Withdrawal OFF.
  4. Save. LBank shows the API key and the secret.
Copy the secret now. The secret is displayed only once. If you lose it, you must delete the key and create a new one.

Step 2 — Set the IP whitelist

LBank binds API keys to the IP address that calls them. You have two safe options:

  • Whitelist the tool's server IP. A multi-tenant cockpit sends orders from its own server, so paste that server's IP into LBank's IP-restriction field — not your home IP. FinGen displays the exact IP to whitelist on the connect screen.
  • Use a no-IP-restriction key. Simpler, and works across both spot and futures, but the key is usable from anywhere it leaks — so the trade-only permission becomes your main safeguard.
Important nuance: LBank keeps separate IP whitelists for spot and futures. Whitelisting for one does not automatically cover the other. If futures orders fail signature checks, confirm the futures whitelist specifically.

Step 3 — Connect it to the cockpit

In FinGen's Add account screen:

  1. Choose LBank as the exchange.
  2. Give the account a label (e.g. "LBank — main").
  3. Paste the API key and secret.
  4. Click Test & save.

FinGen encrypts the secret in your browser using a non-extractable key and stores only an encrypted reference. The secret never reaches FinGen's server — orders are signed locally and forwarded. Read more about why that model matters in what a multi-exchange trading cockpit is.

Step 4 — Verify it works

A good "Test & save" does a read call (balance/permissions) and reports status. You want to see:

  • Connected status with your balance.
  • Trade permission present.

If you then want to trade several accounts together, see fan-out trading.

Troubleshooting common LBank API errors

SymptomLikely causeFix
10007 Invalid signatureWrong secret, or request from a non-whitelisted IPRe-paste the secret; whitelist the tool's server IP for the right market
Orders read but won't placeTrade permission missing, or futures whitelist not setEnable trade permission; whitelist the futures IP specifically
Leverage doesn't applyLeverage set on the wrong direction/bucketUse a cockpit that sets leverage for the order's own direction before placing
Works on spot, fails on futuresSeparate spot/futures whitelistsAdd the IP to the futures whitelist too

Security checklist

  • Withdrawal permission is OFF.
  • IP whitelist set to the tool's server IP (or deliberately using a no-IP key).
  • Secret copied at creation and stored in a password manager.
  • Connected to a cockpit that keeps the secret client-side, encrypted.
  • You can revoke the key from LBank at any time if something looks wrong.

Key takeaways

The safest LBank API key is trade-only and IP-restricted, connected to a tool that keeps your secret encrypted in your browser. Those three choices mean that even in a worst-case leak, the key cannot withdraw your funds and cannot be used from an unauthorized location. Set it up once, correctly, and you can trade with confidence. Open the FinGen cockpit to connect your first LBank account.

Frequently asked questions

What permissions should an LBank trading API key have?
Enable read and trade (futures/perpetual) permissions, and leave withdrawal permission OFF. A trade-only key can open and close positions but cannot move your funds off the exchange, which limits the damage if the key ever leaks.
Why does the key need an IP whitelist?
An IP whitelist means the key only works when the request comes from an approved address. Because a multi-tenant cockpit sends orders from its server, that server's IP must be whitelisted on the key (or you use a no-IP-restriction key). It stops a leaked key from being used elsewhere.
Does FinGen see my API secret?
No. FinGen encrypts the secret in your browser with a non-extractable key and stores only an encrypted reference. Orders are signed and the secret never reaches FinGen's server in plain text.
I got error 10007 'Invalid signature' — what's wrong?
10007 usually means a signing or IP issue: the request came from a non-whitelisted IP, or the key/secret pair is mismatched. Confirm the correct secret, and that the tool's server IP is whitelisted for the right market (LBank keeps separate whitelists for spot and futures).
Trade every exchange from one screen

FinGen is a multi-exchange cockpit: connect your own API keys and fan one order across all your accounts — keys stay encrypted in your browser.

Open the cockpit →

This article is for general information only and is not financial, investment, legal, or tax advice. Crypto and leveraged perpetual futures carry a high risk of loss. Do your own research and never trade more than you can afford to lose.