- Not stored on the page. Nothing you type on the Credentials step is saved in your browser or with your onboarding progress. If you leave before submitting, you’ll need to enter them again.
- Sent once. Keys are transmitted all together when you confirm at the end of the Credentials step, then cleared from your browser.
- Encrypted at rest. Blockhouse’s key manager encrypts them with AES-256.
- Used only from our IP addresses. Each key is restricted to Blockhouse’s IP addresses, so it can’t be used from anywhere else.
- No withdrawals. Exchange keys can read and trade only, and funds move between exchanges through your prime broker. The one exception is Kraken’s Futures trading key, which can move margin between the account’s own Futures and Spot wallets.
Reference
How your keys are stored
What happens to your API keys after you enter them.
Was this page helpful?