Session keys
How a session key lets you trade without confirming every order in your wallet, and what it can and cannot do.
Confirming every order in a wallet would make trading impossible. Instead, you sign once to authorise a session key that lives in your browser and signs orders for you.
What you authorise
When you authorise a session key, your signature fixes:
- an expiry: after it, the key is useless;
- a size cap: the largest order notional the key may sign;
- a label: a name, so you can recognise the key later.
What a session key can do
A session key signs orders, cancels and account settings. It cannot withdraw. Withdrawals are always signed by one of your sign-in credentials. See Withdrawals.
Revoking a key
You can list your active session keys and revoke any of them at any time. Revoking the key you are using is the same as logging out.
What gets recorded
Every session key authorisation is committed as an event leaf in your history, so the keys allowed to act for you are part of the record you can verify.