Open Bybit API management
Open Bybit → API Management (or testnet API Management for testing) → Create New Key → System-generated API Keys.
Set permissions — trade only
- Enable: Unified Trading → Trade (and read), and Derivatives / Contract — Trade.
- Disable: Withdraw and Internal Transfer. The bot never needs them.
- IP whitelist (recommended): bind the key to the server IP running the bot. For local / testnet use you can leave it unbound.
Connect it in the bot
In the Telegram bot, tap 🔑 Re-connect (or send
/connect) and follow the prompt to paste your API Key and API Secret. The bot encrypts and stores them; it never logs them.Testnet vs mainnet. For testing, create the key on testnet.bybit.com (the bot defaults to testnet). Use a mainnet key only when you intend to trade real funds.