Security is an important concern to have. We have built in great security features from the very beginning. This means 2FA, API keys shouldn't allow withdrawal access, encryption of API keys, and we use FIPS 140-2 validated hardware security modules (HSMs) to protect the confidentiality and integrity of your Exchange API keys.