How to create OKX API keys
Create a read-only OKX API key with a passphrase to connect your account.
Overview
OKX requires three credentials to authenticate API requests: an API Key, a Secret Key, and a Passphrase. The Passphrase is a password you set yourself when creating the key — OKX does not generate it for you. Holdix only ever reads your balances — it never places orders, withdraws funds, or performs any write operations.
Step 1 — Open API Management
Log in to OKX and navigate to: Profile icon (top right) → API Or go directly to: okx.com/account/my-api Click "Create API key" to start.
Step 2 — Set a label and choose a purpose
Set a descriptive label such as "Holdix" so you can identify it later. When asked for a purpose, select the general API trading option — this gives access to account balance endpoints.
Step 3 — Set your passphrase
Enter a passphrase of your choice. This is NOT your OKX account password — it is an additional secret tied specifically to this API key. Choose something strong and save it in a password manager. Important: OKX does not show this passphrase again after creation. You will need to enter it in Holdix when connecting, so keep it safe.
Step 4 — Set permissions to Read only
Under "Permissions", select Read only. Do NOT enable: — Trade (order placement) — Withdrawal — Transfer — Sub-account management Read-only access is sufficient to fetch all balance and position data.
Step 5 — IP restriction (optional but recommended)
For extra security you can restrict the key to specific IP addresses. If you access Holdix from a fixed server or VPN, add its IP here. Leave unrestricted if you use multiple locations.
Step 6 — Complete 2FA and copy credentials
Confirm the key creation with your 2FA method (authenticator app, SMS, or email). OKX will display: — API Key — Secret Key (shown only once — copy it immediately) You already know your Passphrase (the one you set in Step 3). Paste all three into the "Connect Exchange" dialog in Holdix. Your credentials are encrypted with AES-256-GCM before being stored — plaintext values are never saved.
Where to enter credentials in Holdix
In the "Connect Exchange" dialog, select OKX and fill in all three fields: API Key → the key OKX displayed after creation API Secret → the secret key OKX displayed (one-time only) API Passphrase → the passphrase you chose in Step 3 All three are required. The Connect button stays disabled until all three are filled in.
Troubleshooting
"okx requires password credential" — the passphrase field was empty. Enter the passphrase you set when creating the key. "Passphrase incorrect" — the passphrase you entered doesn't match what you set. If you forgot it, delete the key on OKX and create a new one. "Invalid API key" — the key or secret was copied incorrectly. Recreate the key on OKX. IP restriction error — the key is bound to an IP that doesn't match your current address. Add your IP on OKX or remove the IP restriction.
Related Articles
Create a read-only Binance API key to connect your account securely.
How to create Bybit API keysCreate a read-only Bybit API key with the correct permissions to connect your account.
How to create WhiteBIT API keysCreate a read-only WhiteBIT API key with the correct permissions to connect your account.