Why an exchange API key won’t show your real crypto profit
What an API key actually sees
An API key is read-only access to your exchange account. A tracker uses it to pull your trades and balances and draw a portfolio. It sounds great: connect it once and forget about it.
But the key sees the world through the exchange’s eyes, and your money doesn’t live only on the exchange. Here is what it misses:
- Cash you sent from your bank. The key sees USDT arrive, but not how many dollars you actually paid, card fees and P2P markup included.
- Withdrawals to your cold wallet. To the exchange, coins simply left. The tracker shows a drop in your balance even though you lost nothing.
- Moves between your own portfolios. Long term, mid term, “house fund”: one account to the exchange, different goals to you.
- Gifts to family. Send coins to your spouse’s or your kid’s wallet and the key records a withdrawal. That’s it.
None of these are edge cases. They’re exactly the moves that answer the question that matters: how much of my own money went in, and how much came back?
Example: what the tracker shows vs. what really happened
Over a year, Mark wired $12,000 from his bank and got 12,000 USDT. He bought 0.15 BTC for 9,000 USDT and immediately moved it to his hardware wallet. He also bought 1 ETH for 3,000 USDT and kept it on the exchange. Later he sold 0.5 ETH for 1,750 USDT and cashed it out to his bank. Today BTC is at $70,000 and ETH at $3,500.
| Tracker with an exchange key | What really happened | |
|---|---|---|
| In the portfolio now | $1,750 (0.5 ETH) | $12,250 (0.15 BTC + 0.5 ETH) |
| Own money put in | unknown | $12,000 |
| Cashed out to the bank | unknown | $1,750 |
| Result | can’t tell | +$2,000 |
Mark’s real result: $12,250 in portfolios + $1,750 already in the bank − $12,000 put in = +$2,000. Checking coin by coin: the BTC cost $9,000 and is worth $10,500 (+$1,500); the ETH cost $3,000, half sold for $1,750 and the other half is worth $1,750 (+$500).
The API tracker only sees 0.5 ETH on the exchange. The bitcoin on the hardware wallet has vanished from its view, and it never saw the $12,000 from Mark’s bank at all.
The other headaches with API keys
- Static IP requirements. Some exchanges lock a key to an IP address. On a regular home connection without a static IP, the key just stops working.
- Renewing every 30, 60 or 90 days. Without an IP lock, many exchanges make keys expire. So every quarter you log in, create a new key and paste it in again.
- Security. Even a read-only key exposes your history and balances. The fewer services that store one, the better you sleep.
- Multiple exchanges and P2P. Buy on one exchange today, swap on P2P somewhere else tomorrow. You end up with a pile of keys and gaps in your history anyway.
Why manual tracking is a feature, not a chore
A long-term investor doesn’t make many moves: a few buys a month, an occasional transfer to cold storage, maybe taking profit once a year. Logging each one takes about thirty seconds.
And in those thirty seconds you do what no API key can:
- Record how much of your own money you spent and how much crypto you got.
- Decide which portfolio it belongs to: your long-term stack, a mid-term bet or your kid’s savings.
- Think about the trade one more time. Tracking by hand keeps you honest: it’s hard to log an impulse buy with a straight face.
Bought ETH on one exchange, swapped USDT on P2P somewhere else? Doesn’t matter. No wondering whether the key is connected or whether the trade will sync. You know you’ll log it yourself.
How it works in Crypto Journal
The journal is built around deliberate, manual entries. You don’t need an API key.
- Deposit — how much cash you spent, what you received (a stablecoin or a coin directly) and which portfolio it goes to. The rate is calculated from “spent ÷ received”.
- Withdraw — how much crypto you gave and how much cash came back, either “Cash out to fiat” or “Paid with crypto”.
- The Overview shows Deposited, Withdrawn and your Fiat balance: Withdrawn − Deposited. While it’s negative, you haven’t got your money back yet.
- Transfers between portfolios are neither an investment nor a gain. Moving BTC to your cold-wallet portfolio carries the coins over together with their cost.
- Import is there if you want it. You can load trades from a CSV file, and from some exchanges with a read-only key. It’s handy for old history. But your real profit comes from the Deposit and Withdraw records, because that’s the part you know better than any exchange.
FAQ
Is it safe to give a crypto tracker an API key?
A read-only key can’t move funds, but it does expose your history and balances. If you connect one, never enable trading or withdrawal permissions. Or skip the key altogether.
Why did my exchange API key stop working after 90 days?
Many exchanges limit how long a key lives unless it’s locked to a static IP. You have to create a new key and add it to the tracker again.
Can an API key see transfers to my hardware wallet?
It sees coins leaving the exchange, but it doesn’t know the wallet is yours. That’s why a tracker can show your portfolio dropping when you sold nothing.
Isn’t logging everything by hand a pain?
If you make dozens of trades a day, yes, and this kind of tracking isn’t for day trading. If you make a few moves a month, it’s thirty seconds per entry and the full picture in return.
The journal is invite-only for now
We’re opening Crypto Journal in small groups. Leave your email and we’ll send an invite as soon as a spot opens up.
Just the invite and key launch news. No spam. Privacy PolicyThis article is for information only and is not financial, investment or tax advice. Names and numbers in the examples are illustrative.