Bybit Account Settings: Security Menu Walkthrough

Create the Account First

New users: register via https://partner.bybit.com/b/34899 (code 34899), then open profile → security before doing anything else.

Must-Enable Options

Authenticator-based 2FA, withdrawal confirmation by email or SMS, and device management all belong on from day one.

• Authenticator app 2FA
• Withdrawal whitelist
• Login alerts
• API key restrictions

The Bybit-Specific Setting Worth Extra Attention

A withdrawal address whitelist plus a dedicated API key permission screen for bot or copy-trading users — set this up before you rely on it under pressure, not during an incident.

Preferences

Set your display currency, theme, and language. Keep security emails on even if you disable marketing emails.

API Keys

Only create API keys if you actually run a bot or use Bybit Demo Trading. Restrict IPs and disable withdrawal permission on the key.

Review Monthly

Check the device list and API key list on Bybit once a month — remove anything you no longer recognize.

What Makes Bybit Different Day to Day

Bybit's bigger differentiator is Demo Trading and Copy Trading — most people never look past the signup flow to notice it.

Layer that on top of Copy Trading, and the cost picture on Bybit looks different from a generic exchange checklist.

the Unified Trading Account (UTA), which shares margin across spot, derivatives, and options round out the product, but none of it replaces reading the live fee schedule before you size a trade.

• Watch for: skipping Demo Trading entirely and opening leveraged futures on day one
• Also watch for: copying a leaderboard trader without checking their maximum drawdown, then panicking on the first red day
• Security basics still apply: 2FA, a withdrawal address whitelist plus a dedicated API key permission screen for bot or copy-trading users