The #1 Concern: "Can Telos Withdraw My Funds?"
No. Telos never has and never will have withdrawal permissions on your exchange account. When you create API keys for Telos, you should only enable trading permissions — never withdrawal permissions.
This is the single most important security practice for using any third-party trading tool, and it's non-negotiable.
How We Protect Your API Keys
Telos uses enterprise-grade security to protect every exchange connection. Here's the full breakdown:
- Encryption at rest: API keys are encrypted with AES-256 before being stored in our database. The encryption keys are managed through a separate key management system (KMS) with automatic rotation.
- Never logged: API keys and secrets are never written to application logs, error reports, or analytics events.
- Transport encryption: All API communication uses TLS 1.3 with certificate pinning.
- IP whitelisting: We provide specific IP addresses that you can whitelist on your exchange, ensuring only Telos's servers can use your keys.
What Telos Can and Cannot Do
| Action | Can Telos Do It? |
|---|---|
| View your balance | ✅ Yes |
| Place orders | ✅ Yes |
| Cancel orders | ✅ Yes |
| View trade history | ✅ Yes |
| Withdraw funds | ❌ No |
| Transfer between accounts | ❌ No |
| Generate new API keys | ❌ No |
The Kill Switch
If you ever want to immediately revoke Telos's access, you can:
- Delete your API keys on the exchange (instant revocation)
- Use the kill switch in Telos to close all positions and stop trading
- Contact support for immediate manual intervention
Ready to get started? Create a free account and connect your exchange in 5 minutes.