Get started
Use the instructions below to set up your Bitvavo account, create development credentials, and learn how to authenticate your requests.
Before you start
Before you start integrating, make sure you have:
Sign up for a Bitvavo account
Before you start building your trading app, make sure you have either a private or a corporate Bitvavo account.
- To sign up for a private account, go to the Bitvavo website. If you need help, see Creating an account.
- To sign up for a corporate account, contact
[email protected]for more information about eligibility and the onboarding process.
Enable two-factor authentication
- Log in to your Bitvavo account.
- Under your account, select Security.
- Under Two-factor authentication, select Enable 2FA.
- Enter your Bitvavo account password.
A QR code displays on the screen. - Scan the QR code with an authenticator app, like Google Authenticator.
- Enter the 6-digit 2FA code from your authenticator app.
- Select Confirm.
Your Bitvavo account is now protected with two-factor authentication.
Create an API key and secret
- Log in to your Bitvavo account.
- Under your account, select Settings.
- In the API tab, select Add new API key.
- Enter:
- Your Name for the API key.
- Under IP Whitelist, the IP address from which you want to make API requests.
tip
Whitelisting your IP address prevents your account from being accessed if your API credential is stolen.
- Select the permissions for your API key:
- View access: retrieve information about your account and transfers. For orders and trades, your API key must also have the Trade digital currencies permission.
- Trade digital assets: place, update, view, and cancel orders. For orders and trades information, your API key must also have the Read-only permission.
- Withdraw digital assets: withdraw your assets to an external cryptocurrency address or a verified bank account.
warning
Withdrawals made using Bitvavo API do not require 2FA and e-mail confirmation.
- Enter the 2FA code and select Confirm.
warning
Make sure to store your API key and secret in a secure location. You cannot retrieve it later.