How to Securely Connect Your Bitfinex API Key

Your Funds Stay on Bitfinex — Always

LendPace is a non-custodial platform. We never hold, transfer, or have direct access to your funds — everything stays in your Bitfinex account. LendPace only places and cancels margin funding offers on your behalf, using a restricted API key that you create and control.

This guide walks you through creating the safest possible API key so you can start lending with confidence.

Step 1: Log Into Bitfinex and Open API Key Management

1. Sign in to your Bitfinex account.
2. Navigate to Account > API Keys (or go directly to https://setting.bitfinex.com/api).
3. Click Create New Key.

Step 2: Set Permissions — Only "Margin Funding"

This is the most important step. Bitfinex lets you grant granular permissions to each API key. For LendPace, you need exactly one permission:

• Margin Funding — Read and Write: Toggle this ON.

Leave everything else OFF, including:

• Account — not needed
• Orders / Trading — not needed
• Withdrawal — NEVER enable this. LendPace will never ask you to grant withdrawal permission. If any service asks you to enable withdrawals, treat it as a red flag.

By limiting the key to Margin Funding only, it is technically impossible for anyone — including LendPace — to move your funds out of your account using this key.

Step 3: Add a Label

Give your key a descriptive name like "LendPace Funding Bot". This makes it easy to identify later, especially if you manage multiple API keys on Bitfinex.

Step 4: Restrict by IP Address (Recommended)

Bitfinex lets you whitelist specific IP addresses for each API key. This step is optional but strongly recommended — an IP-restricted key only works from that address, rendering it useless if exposed elsewhere. You can find LendPace's server IP in your dashboard settings after connecting.

Step 5: Generate and Save Your Key

1. Click Generate API Key. Bitfinex will send a confirmation email — click the link to finalize.
2. You will see your API Key and API Secret. Copy both and store them securely.
3. Important: Bitfinex only shows the API Secret once. If you lose it, you will need to create a new key.

Step 6: Connect to LendPace

1. Log into your LendPace dashboard.
2. Go to Settings and find the API Key section.
3. Paste your API Key and API Secret, then save.
4. LendPace will verify the key has the correct permissions. If everything checks out, you are ready to start lending.

What Can LendPace Actually Do With This Key?

With a Margin Funding-only key, LendPace can:

• Place new funding offers at optimal rates using the IBRR algorithm
• Cancel existing funding offers to adjust to market changes

That is it. No trading, no withdrawals, no account modifications.

Best Practices for Ongoing Security

• Never share your API Secret. Treat it like a password.
• Review your keys periodically. Remove any keys you no longer use from Bitfinex API settings.
• Revoke anytime. Delete the API key from Bitfinex and LendPace instantly loses all access.
• Enable 2FA on Bitfinex. This protects your account even if your login credentials are compromised.

You Are in Control

LendPace is built around one principle: your funds are yours. Non-custodial means we work for you, not with your money. You decide when to start, when to stop, and what permissions to grant. The API key is the bridge — and you hold both ends.

Frequently Asked Questions

What happens if my API key is compromised?

With a Margin Funding-only key, an attacker can only place or cancel funding offers. They cannot trade, withdraw, or modify your account. You can immediately revoke the key from Bitfinex API settings to cut off all access instantly.

Does LendPace store my API secret?

LendPace encrypts your API credentials using Fernet encryption. The secret is never stored in plain text and is only decrypted when the bot needs to interact with Bitfinex on your behalf. You can delete your key from LendPace at any time.

How often should I rotate my API keys?

Quarterly rotation is a good security practice. When you create a new key, remember to only enable Margin Funding permissions and to update the key in your LendPace settings. The old key should be deleted from Bitfinex immediately.

Can I use IP whitelisting with LendPace?

Yes, and it is strongly recommended. Bitfinex allows you to whitelist specific IP addresses for each API key. You can find LendPace's server IP in your dashboard settings. An IP-restricted key only works from that address, rendering it useless if exposed elsewhere.

Ready to connect? Head to your Dashboard Settings and link your Bitfinex API key in minutes. Then follow our getting started guide to activate your first lending bot.