Prime

Creating and Rotating API keys on Coinbase Prime

Important

You can only create an API key on Coinbase Prime if you have one of the following roles: Administrator, Initiator, Authorized Signatory, or Full Trader. Learn more about authorized user roles and permissions and how to update them on your account.

To create an API key:

  1. Sign in to Coinbase Prime.

  2. On the lower-left corner of the page, click the Gear settings icon.

  3. Click APIs.

  4. Next to Activated Keys, click Create API Key.

  5. In the pop-up window, enter the API Name, Access Type, and Expiration Date.

  6. Click Continue.

  7. Verify your identity with YubiKey.

    Consensus approvals

    This action requires consensus approvals. You can't continue to the next step until consensus approvals are met. Learn more about security settings on Coinbase Prime.

  8. Under Pending Keys, find your API Key.

  9. Click Activate Key.

  10. Review details in the pop-up window then click Activate API key.

  11. Verify your identity with YubiKey.

To rotate an API key (creating a new API key and disabling an old API key):

We recommend clients rotate API keys every 90-180 days in order to protect sensitive data and reduce the risk of unauthorized access.

  1. Record current API Key Properties, noting the type of API key (e.g. Portfolio level, Entity level or Organization level) and the roles assigned to the API key such as Trade, Transfer, Read or a combination thereof.

  2. Create a new API key. In the Coinbase Prime UI, create a new API key with the parameters noted above. Store the new API key (Access Key), passphrase, and Signing Key in a secure location.

  3. Test the new API key. Verify that the new API key produces the same results as the original API key.

  4. Replace the old API key. Update any applications to use the newly created API key, replacing all instances of the original key material.

  5. Deactivate the original API key. In the Coinbase Prime UI, deactivate the original API key to prevent any further use of this key.