Should I whitelist my server IP for exchange API keys?

Yes — IP whitelisting is highly recommended and considered a critical security best practice when running MagicTradeBot.

You should always whitelist the public IP address of the server or PC where MagicTradeBot is running in your exchange API key settings.

Why IP whitelisting is important

IP whitelisting ensures that only your trusted machine can use the API keys, even if the keys are accidentally leaked or exposed.

With IP whitelisting enabled:

API keys will not work from any other IP
Unauthorized access attempts are automatically blocked
The risk of account compromise is drastically reduced

Without IP whitelisting:

Anyone who obtains your API key and secret can place trades
Your account becomes vulnerable to misuse or automated attacks

How IP whitelisting protects MagicTradeBot users

MagicTradeBot operates continuously and requires stable API access. Whitelisting:

Prevents malicious trade execution from unknown locations
Protects against stolen credentials
Ensures that only your bot instance can interact with the exchange
Adds a strong security layer without affecting bot performance

🔐 Even if you use environment variables or encrypted storage, IP whitelisting adds an extra layer of defense that cannot be bypassed.

What IP address should be whitelisted?

Cloud server (VPS / dedicated server) → Whitelist the server’s public IPv4 address
Home or office PC → Whitelist your current public IP (Note: residential IPs may change—cloud servers are recommended)
Docker / containerized setup → Whitelist the host machine’s public IP

Exchange-side configuration

All major exchanges supported by MagicTradeBot allow IP whitelisting, including:

Binance
Bybit
OKX
Bitget
Hyperliquid

In the exchange dashboard:

Create or edit an API key
Enable IP restriction / whitelist
Add your server’s public IP
Save and confirm changes

What happens if IP whitelisting is misconfigured?

API calls will be rejected
Orders will fail to place
MagicTradeBot will log authentication or permission errors
No trades will execute until the correct IP is whitelisted

Best-practice checklist

✅ Always whitelist your server or VPS IP
✅ Use a static IP whenever possible
✅ Disable withdrawal permissions on API keys
✅ Combine IP whitelisting with environment variables
❌ Never use unrestricted API keys in production

✅ Key takeaway

IP whitelisting is one of the most effective security measures you can take when running MagicTradeBot. It protects your trading account even if credentials are compromised and is strongly recommended for all live-trading setups.