How to run a crypto trading bot safely with your own keys

Updated 2026-11-02 · Planners and templates · by CyberMax

Short answer

Give a bot the least it needs: an API key with trading permission only and withdrawals turned off, restricted to your computer's IP address, ideally on a sub-account holding only the money you are willing to let it trade. Start in paper or testnet mode, set a maximum position and a maximum daily loss, and keep a kill switch in reach. A self-hosted bot keeps the key on your own computer instead of a cloud service's servers.

Create a sub-account with only the bot's money.
Create an API key: trading ON, withdrawals OFF.
Whitelist your computer's public IP on the key.
Run the bot in paper mode, then on the exchange testnet.
Set a max position, a max daily loss and max open orders.
Go live small; keep the kill switch one click away.

Copy-paste code

Key permissions checklist

[x] Read
[x] Spot trading
[ ] Withdrawals        <- must be OFF
[ ] Futures / margin   <- not needed for spot bots
[x] IP restricted to your computer

Good to know

Check that your exchange serves your country before connecting any bot.

Trading involves risk of loss.

Information only, not financial advice.

Helmwick: The crypto bot that runs on your computer

from $19/month

Helmwick is a bot you run on your own computer: keys encrypted there, never sent to CyberMax; paper and testnet free; kill switch, daily loss and position limits on by default; Pro $19 a month for live trading.

Get Helmwick: $19/month See what's inside Download free (paper + testnet)

Secure checkout · 14-day fix-or-refund if it doesn't work as described (terms)

Questions

Why turn withdrawals off?

A key that cannot withdraw cannot move coins off the exchange if it leaks. It can still trade, so keep loss limits too.

Free: the Free Planner Sampler

4 printable previews (budget, debt payoff, focus planner, habit tracker), then 5 short emails with formulas that make a budget stick.