WhiteBIT Exchange Setup
Connect your WhiteBIT account to SignalBee in minutes. This guide walks you through creating and configuring API keys with the exact permissions needed for automated trading.
Prerequisites
Before you begin, make sure you have:
- Verified WhiteBIT account - Identity verification (KYC) completed
- 2FA enabled on WhiteBIT - Required for API key creation
- SignalBee account - Ready to connect an exchange
- Password manager - For storing your API credentials securely
Security Note: WhiteBIT requires 2FA (two-factor authentication) to create API keys. If you haven't enabled 2FA yet, go to Profile → Security in your WhiteBIT account.
About WhiteBIT
WhiteBIT is a European cryptocurrency exchange known for its user-friendly interface and competitive fees. Key highlights:
- European-based - Regulated exchange with strong compliance standards
- Wide trading pair selection - Extensive list of spot trading pairs
- Competitive fees - 0.1% maker/taker fees on spot markets
- WBT token benefits - Native token offers fee discounts and other perks
- Simple API setup - Straightforward two-credential authentication
Creating Your API Key
Follow these steps to create an API key on WhiteBIT:
Step 1: Log In to WhiteBIT
- Go to whitebit.com
- Log in with your email and password
- Complete 2FA verification if prompted
Step 2: Navigate to API Management
- Click your profile icon in the top-right corner
- Select Profile from the dropdown menu
- Click API Keys in the left sidebar (under Security section)
- You'll see a list of your existing API keys (if any)
Step 3: Create a New API Key
- Click the Create API Key button
- You'll be presented with the API configuration screen
Step 4: Enter a Description
- Enter a descriptive label:
SignalBee Trading - A clear label helps you identify this key's purpose later
Tip: Use specific labels like "SignalBee-Spot" or "SignalBee-Main" if you plan to create multiple keys for different purposes.
Step 5: Configure Permissions
- Check the permission boxes as described in the Configuring Permissions section below
- Enable Read and Trade permissions
- Never enable the Withdrawal permission
Step 6: Complete Security Verification
- Enter your 2FA code from your authenticator app
- Click Confirm to create your key
- Wait for the system to generate your credentials
Step 7: Copy Your Keys IMMEDIATELY
After creation, your credentials will be displayed:
- API Key - Can be viewed later in your API Management page
- Secret Key - Shown only ONCE - Copy it immediately!
| Key | Can View Later? | Action Required |
|---|---|---|
| API Key | Yes | Copy and save |
| Secret Key | NO - Never shown again | Copy immediately! |
Warning: If you navigate away without copying your Secret Key, you'll need to delete this API key and create a new one. There is no way to recover a Secret Key.
Save both keys in your password manager now before proceeding.
Configuring Permissions
WhiteBIT has a straightforward permission system. This is critical for security.
Required Permissions
| Permission | Enable? | Why |
|---|---|---|
| Read | Yes | Allows SignalBee to check your balances and account info |
| Trade | Yes | Allows SignalBee to place and manage spot orders |
Never Enable These Permissions
| Permission | Enable? | Why |
|---|---|---|
| Withdraw | NEVER | SignalBee never needs withdrawal access. Enabling this is a serious security risk. |
Security Note: Even if your API key is somehow compromised, funds cannot be withdrawn without withdrawal permission enabled. This is your most important security protection.
Simple Two-Credential Setup
WhiteBIT uses a simple credential model similar to Binance:
| Exchange | Credentials Required |
|---|---|
| WhiteBIT | 2 values: API Key + Secret Key |
| Binance | 2 values: API Key + Secret Key |
| LBank | 2 values: API Key + Secret Key |
| OKX | 3 values: API Key + Secret Key + Passphrase |
| KuCoin | 3 values: API Key + Secret Key + Passphrase |
This makes WhiteBIT one of the simpler exchanges to configure.
IP Whitelist Configuration
IP whitelisting restricts your API key to only work from specific IP addresses. This is optional but adds a strong security layer.
Why Use IP Whitelisting?
| Scenario | Without Whitelist | With Whitelist |
|---|---|---|
| SignalBee places trade | Works | Works |
| Attacker tries stolen key | Could work | Blocked |
Even if your API key is somehow exposed, it won't work from unauthorized IP addresses.
SignalBee Server IP Addresses
Note: Contact support@signalbee.trade to request SignalBee's current production IP addresses for whitelisting. We maintain static IPs specifically for exchange API calls and will notify you before any infrastructure changes.
How to Configure IP Whitelisting
- In API Keys, find your SignalBee API key
- Click Edit next to the key
- Enable IP Address Restriction
- Enter each SignalBee IP address provided by support
- Click Save
- Complete 2FA verification if prompted
If You Skip IP Whitelisting
If you choose not to use IP whitelisting:
- Leave IP restrictions disabled
- Understand this is less secure but still safe if withdrawals are disabled
- Your other security measures (no withdrawal permission) still protect your funds
Adding to SignalBee
Now connect your WhiteBIT API key to SignalBee:
Step 1: Go to Exchanges Page
- Log in to your SignalBee account
- Navigate to Exchanges in the main menu
Step 2: Add New Exchange
- Click the Add Exchange button
- Select WhiteBIT from the exchange list
Step 3: Enter Your Credentials
WhiteBIT uses a simple two-value API system:
- API Key - Paste your WhiteBIT API key
- Secret Key - Paste your WhiteBIT Secret key
- Label (optional) - Enter a name like "WhiteBIT Main Account"
Note: WhiteBIT requires only 2 credentials (API Key + Secret Key). This is simpler than exchanges like OKX or KuCoin that require an additional passphrase.
Step 4: Test the Connection
- Click Save and Test Connection
- Wait for SignalBee to verify your credentials
- Look for the success message
Step 5: Verify Your Setup
After successful connection:
- Your WhiteBIT balances should appear in SignalBee
- Check that your expected assets are listed
- Balances confirm the Read permission is working
Tip: If balances don't appear, verify that Read permission is enabled on your API key.
WhiteBIT-Specific Considerations
Ticker Format
WhiteBIT uses underscore-separated uppercase ticker symbols. SignalBee converts automatically:
| SignalBee Format | WhiteBIT Format |
|---|---|
| BTC-USDT | BTC_USDT |
| ETH-USDC | ETH_USDC |
| SOL-BTC | SOL_BTC |
| XRP-USDT | XRP_USDT |
No action needed! Your webhook symbols work directly with WhiteBIT - SignalBee handles the conversion automatically.
Supported Order Types
WhiteBIT spot trading supports the following order types:
| Order Type | Supported | Notes |
|---|---|---|
| Market Order | Yes | Executes immediately at best available price |
| Limit Order | Yes | Executes at specified price or better |
| Stop-Loss | No | Not available on WhiteBIT |
| Stop-Loss-Limit | No | Not available on WhiteBIT |
| Take-Profit | No | Not available on WhiteBIT |
Important: WhiteBIT only supports Market and Limit orders for spot trading. If your trading strategy requires stop-loss or take-profit orders, these must be managed at the strategy level rather than as native exchange orders.
Unified Account Structure
WhiteBIT uses a unified account model where all your funds are available for spot trading:
| Exchange | Account Structure |
|---|---|
| WhiteBIT | Unified (all funds in one account) |
| OKX | Multiple accounts (Funding, Trading, etc.) |
| Binance | Unified spot trading |
What this means for you:
- No need to transfer funds between accounts
- All deposited funds are immediately available for trading
- Simpler to manage than exchanges with multiple account types
HMAC-SHA512 Authentication
WhiteBIT uses HMAC-SHA512 for request signing, which differs from the HMAC-SHA256 used by most exchanges.
What this means for you:
- SignalBee handles this automatically - no action required
- Your credentials work exactly like other exchanges
- The different algorithm is completely transparent to you
Note: You don't need to understand the technical details. Just provide your API Key and Secret Key, and SignalBee handles the rest.
Minimum Order Sizes
WhiteBIT enforces minimum order values. Orders below these minimums will be rejected:
| Requirement | Description |
|---|---|
| Min Amount | Minimum quantity of base asset |
| Min Total | Minimum value of order (price × quantity) |
Tip: Check WhiteBIT's trading rules for current minimum order sizes for specific pairs. If you receive "Min Amount" or "Min Total" errors, increase your order size.
Trading Fees
| Fee Type | Rate |
|---|---|
| Maker | 0.1% |
| Taker | 0.1% |
WhiteBIT offers fee discounts for WBT (WhiteBIT Token) holders. Check WhiteBIT's fee schedule for details on VIP tiers and WBT discounts.
API Rate Limits
- WhiteBIT allows approximately 1200 requests per minute per IP
- SignalBee handles rate limiting automatically
- If you see rate limit errors, reduce your signal frequency or check for duplicate webhooks
No Testnet Available
Important: WhiteBIT does not offer a public testnet for spot trading.
| Testing Approach | Recommendation |
|---|---|
| Production testing | Start with very small order sizes |
| Signal verification | Test webhook delivery before enabling live trading |
| Order validation | Use limit orders to control execution price |
Tip: Start with small order sizes (e.g., $10-20) when first testing your SignalBee integration with WhiteBIT.
Troubleshooting
Common WhiteBIT-specific errors and solutions:
| Error | Code/Status | Likely Cause | Solution |
|---|---|---|---|
| Invalid API Key | 401 | Wrong or deleted API key | Re-copy API key carefully from WhiteBIT |
| Invalid Signature | 401 | Wrong secret key | Re-copy Secret Key exactly. If lost, create new key. |
| IP Not Whitelisted | 403 | IP restriction blocking request | Add SignalBee IPs or disable IP restriction |
| Insufficient Balance | INSUFFICIENT_BALANCE | Not enough funds | Deposit funds or reduce order size |
| Order Not Found | ORDER_NOT_FOUND | Invalid order ID | Order may have been filled or cancelled already |
| Invalid Order | INVALID_ORDER | Bad order parameters | Check price and quantity are valid |
| Invalid Symbol | MARKET_NOT_FOUND | Wrong trading pair | Verify pair is listed on WhiteBIT |
| Min Amount | MIN_AMOUNT | Order quantity too small | Increase order quantity above minimum |
| Min Total | MIN_TOTAL | Order value too low | Increase quantity or price above minimum |
| Rate Limit | 429 | Too many API requests | Wait and retry (automatic). Reduce request frequency. |
| Server Error | 500+ | WhiteBIT server issue | Wait and retry. Usually temporary. |
Connection Test Fails?
If your connection test fails in SignalBee:
- Double-check both keys - Copy-paste errors are the most common issue
- Verify permissions - Ensure Read and Trade permissions are enabled
- Check IP whitelist - Disable IP restriction temporarily to test
- Wait a few minutes - New API keys may take 1-2 minutes to propagate
- Check WhiteBIT status - Verify WhiteBIT is not under maintenance
For persistent issues, see our Error Codes Reference or contact support@signalbee.trade.
Security Best Practices
Follow this checklist to keep your WhiteBIT account secure:
WhiteBIT Account Security
- Enable 2FA with Google Authenticator - more secure than SMS
- Use a unique, strong password for WhiteBIT (not reused from other sites)
- Enable email notifications for account activity
- Review login history regularly for unauthorized access
API Key Security
- Create a dedicated API key just for SignalBee - don't reuse keys across services
- Never enable withdrawal permission - SignalBee never needs it
- Consider IP whitelisting for maximum security
- Never share your Secret Key via email, chat, or screenshots
- Store keys in a password manager (1Password, Bitwarden, etc.)
Ongoing Security
- Review your API keys periodically in WhiteBIT - delete any you don't recognize
- Rotate API keys every 90 days as a security habit
- Monitor trade history on WhiteBIT for any unauthorized activity
Security Note: Even with all these precautions, the most important protection is never enabling withdrawal permission. Without this permission, your funds cannot be moved off the exchange even if everything else is compromised.
Related Resources
- API Key Best Practices - General API key security guidance
- Security Overview - How SignalBee protects your data
- Error Codes Reference - Common error messages explained
- Binance Exchange Setup - Similar two-value API setup
- LBank Exchange Setup - Similar two-value API setup