# Invalid API-key for binance

**URL:** <https://community.postman.com/t/invalid-api-key-for-binance/43022>\
**Category:** Help Hub\
**Tags:** tests, authentication\
**Created:** [January 18, 2023, 11:17pm UTC](https://community.postman.com/t/invalid-api-key-for-binance/43022 "2023-01-18T23:17:35Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![morty973](https://avatars.discourse-cdn.com/v4/letter/m/cc9497/32.png) [@morty973](https://community.postman.com/u/morty973)\
**Post date:** [January 18, 2023, 11:17pm UTC](https://community.postman.com/t/invalid-api-key-for-binance/43022/1 "2023-01-18T23:17:36Z")

</div>

I’m newbie on crypto trading, i’m following the procedure from binance for trading via Postman.

_My question_:  
how can i solve what follows?

_Issue details_:

I followed this procedure:

> **[Articles du blog Binance](https://www.binance.com/fr/blog)**
>
> Ce blog crypto est destiné à présenter les dernières histoires et commentaires aux passionné(e)s de cryptomonnaies. Publié par Binance, la principale blockchain et le premier crypto-écosystème du monde.

and work on a PC with windows10.

when I send the request located at Collections/ **Binance spot API** /Trade/GET Account information (USER DATA)  
{{url}}/api/v3/account?timestamp={{timestamp}}&signature={{signature}}  
i’ve the following error message:

“code”: -2015,  
“msg”: “Invalid API-key, IP, or permissions for action.”

_I’ve already tried_:

my issue is that possible reasons from previous similar incidents have been checked unsuccesfully:

- the Binance API key has been generated with only thicking options:

- the API key and secret key have been set in the **Binance Spot Testnet API** “current value” field and this same environment has been selected in the top right envirnment field

- in the “Collections/Binance spot API/Trade/GET Account Information (USER\_DATA)” request, the timestamp and signature seems ok but i’m not able to juge the request code:  
{{url}}/api/v3/account?timestamp={{timestamp}}&signature={{signature}}  

- also the header “X-MBX-APIKEY” is selected

and the SEND action finally lead to the error message:

 ![image](https://us1.discourse-cdn.com/getpostman/original/3X/7/6/76039b0febdd16ede693505ac75c10e29e62fad6.jpeg)

the only un-consistancy that i noted are:

- the environment is the “Testnet” and the collection mentionned in the procedure uses the “Binance spot API” that doesn’t mention the “testnet” word and there are some warning in some supports that says that tesstnet and production API are not the same

- the procedure mentionned to generate a HMAC “SHA256” and Binance has not mentionned this SHA256 when the HMAC API key is created

could you please give me some help?

---

<div class="post-metadata">

**Author:** ![amarsac](https://avatars.discourse-cdn.com/v4/letter/a/839c29/32.png) [@amarsac](https://community.postman.com/u/amarsac)\
**Post date:** [June 2, 2023, 7:37am UTC](https://community.postman.com/t/invalid-api-key-for-binance/43022/2 "2023-06-02T07:37:38Z")

</div>

+1 I’ve the same issue and still don’t understand what I’ve missed, if you find the issue I’m really curious about it.

---

<div class="post-metadata">

**Author:** ![Mannaio](https://avatars.discourse-cdn.com/v4/letter/m/91b2a8/32.png) [@Mannaio](https://community.postman.com/u/Mannaio)\
**Post date:** [October 8, 2023, 9:19pm UTC](https://community.postman.com/t/invalid-api-key-for-binance/43022/3 "2023-10-08T21:19:09Z")

</div>

I have exactly the same issue, these are m steps

I am trying to test my API Binance open orders by PostMan

This is the get request i am sending

{{url}}/api/v3/openOrders?timestamp={{timestamp}}&signature={{signature}}

and i get this error

{  
“code”: -2015,  
“msg”: “Invalid API-key, IP, or permissions for action.”  
}

Status code: 401

These are the steps i have done

Generated my api-secret and api-key from binance and enabled my IP address with Spot & Margin Trading

In my PostMan i have added the environment Binance Spot TestNet API

I have added the api-key and api-secret in the environment

The Timestamp, Signature, Initial Value fields can be left empty as they’ll be automatically filled by Postman when sending a request

I have followed exactly these instructions succesfully from here : [GitHub - binance/binance-api-postman: Postman collection for Binance Public API, including spot, margin, futures, etc.](https://github.com/binance/binance-api-postman)

But when i send this get request i received the error

{  
“code”: -2015,  
“msg”: “Invalid API-key, IP, or permissions for action.”  
}

Have you found the solution?

---

<div class="post-metadata">

**Author:** ![swapnil.vargaonkar](https://avatars.discourse-cdn.com/v4/letter/s/9e8a1a/32.png) [@swapnil.vargaonkar](https://community.postman.com/u/swapnil.vargaonkar)\
**Post date:** [March 28, 2024, 7:41pm UTC](https://community.postman.com/t/invalid-api-key-for-binance/43022/4 "2024-03-28T19:41:16Z")

</div>

Same problem here. Not sure how this will get resolved. BTW I am an IT professional and know how postman or api key requests work.

---

<div class="post-metadata">

**Author:** ![Mannaio](https://avatars.discourse-cdn.com/v4/letter/m/91b2a8/32.png) [@Mannaio](https://community.postman.com/u/Mannaio)\
**Post date:** [March 29, 2024, 9:49am UTC](https://community.postman.com/t/invalid-api-key-for-binance/43022/5 "2024-03-29T09:49:41Z")

</div>

For me the problem at the end was that i was pasting the wrong IP ( as the msg says: “Invalid API-key, IP, or permissions for action ) but it was not easy to catch, i recommend using this website to chekk your IP =\> [https://www.whatismyip.com/](https://www.whatismyip.com/). Thanks

---

<div class="post-metadata">

**Author:** ![reduardo7](https://sea2.discourse-cdn.com/getpostman/user_avatar/community.postman.com/reduardo7/32/33569_2.png) [@reduardo7](https://community.postman.com/u/reduardo7)\
**Post date:** [September 20, 2025, 2:32am UTC](https://community.postman.com/t/invalid-api-key-for-binance/43022/6 "2025-09-20T02:32:11Z")

</div>

In my case, I complete the following form: [https://www.binance.com/en/survey/9abe7684c2404340a085b847bd3cfae5](https://www.binance.com/en/survey/9abe7684c2404340a085b847bd3cfae5)

---

<div class="post-metadata">

**Author:** ![fabs672](https://avatars.discourse-cdn.com/v4/letter/f/b5a626/32.png) [@fabs672](https://community.postman.com/u/fabs672)\
**Post date:** [January 28, 2026, 6:48pm UTC](https://community.postman.com/t/invalid-api-key-for-binance/43022/7 "2026-01-28T18:48:13Z")

</div>

Are you using or declaring he Host?

I had the same issue and solved it by adding “ **Host: testnet.binance.vision** ” in the headers instead of “[api.binance.com](http://api.binance.com)“. For the **test environment** of course.

It took me ages to figure it out ppuuufffff …

---

<div class="post-metadata">

**Author:** ![koreanpooh2](https://avatars.discourse-cdn.com/v4/letter/k/a9a28c/32.png) [@koreanpooh2](https://community.postman.com/u/koreanpooh2)\
**Post date:** [January 30, 2026, 11:17am UTC](https://community.postman.com/t/invalid-api-key-for-binance/43022/8 "2026-01-30T11:17:59Z")

</div>

I love you. if you reply to me. I will send you small crypto in future. thank you so much. you solved my problem

---

<div class="post-metadata">

**Author:** ![danny-dainton](https://sea2.discourse-cdn.com/getpostman/user_avatar/community.postman.com/danny-dainton/32/29401_2.png) [@danny-dainton](https://community.postman.com/u/danny-dainton)\
**Post date:** [January 30, 2026, 11:26am UTC](https://community.postman.com/t/invalid-api-key-for-binance/43022/9 "2026-01-30T11:26:38Z")

</div>


