Are my API keys secure

Your API keys must always be set to read-only, which prevents any withdrawals or unauthorized actions. They are then securely encrypted and stored on our servers, and are never shared with third parties.