๐ฅ What Is a Sub-account on a Crypto Exchange?
A sub-account is a secondary account that operates under your main exchange account. It functions as a separate trading entity with its own balance, trading history, and API keys, but remains linked to the master account for management and funding purposes.
Sub-accounts are invaluable for businesses, trading teams, and individuals who run multiple trading strategies. They allow you to:
- Separate different trading strategies or portfolios.
- Give team members access without sharing your main account credentials.
- Set custom permissions and limits for each sub-account.
- Isolate risk โ a compromised sub-account doesn't affect the main account.
- Track performance of individual strategies or traders.
Sub-accounts provide a secure and organized way to manage multiple trading activities under one master account. They are especially important for businesses and professional traders who need to separate funds, strategies, and access levels.
โญ Benefits of Using Sub-accounts
Isolate risk โ if a sub-account is compromised, the main account and other sub-accounts remain secure. No need to share main account credentials.
Run multiple trading strategies independently. Track performance, P&L, and risk for each strategy separately without mixing funds.
Give team members access to specific sub-accounts with custom permissions. Assign roles with limited functionality as needed.
Set position limits, trading restrictions, and withdrawal permissions per sub-account. Prevent excessive risk in any single account.
Easily track the performance of each strategy or trader. Generate reports for individual sub-accounts for better analysis.
Create separate API keys for each sub-account with specific permissions. This reduces the attack surface and limits API access.
๐ Step-by-Step Sub-account Setup Guide
Step 1: Log In to Your Main Exchange Account
Log in using your main account credentials and 2FA verification.
Step 2: Navigate to Sub-account Management
Find the sub-account section. Common locations include:
- "Sub-accounts" or "Sub-account Management" under the Account menu.
- Under "Settings" or "Security & Settings."
- Some exchanges have a dedicated "Sub-accounts" tab in the main dashboard.
Step 3: Click "Create Sub-account"
Select the option to create a new sub-account. You may be asked to enter:
- Sub-account name: A descriptive name (e.g., "Strategy A," "Trader John," "Test Account").
- Password: Some exchanges require a separate password for the sub-account.
Step 4: Configure Permissions
Set the permissions and restrictions for the sub-account. Common settings include:
| Permission | Description | Options |
|---|---|---|
| Trading | Allow trading on the sub-account | Spot, Margin, Futures, Options |
| Withdrawals | Allow withdrawals from the sub-account | Enable/Disable, set limits |
| Transfers | Allow transfers between sub-accounts and main account | Enable/Disable, limit amounts |
| API Access | Allow API key creation for the sub-account | Enable/Disable, restrict permissions |
| View-Only | Restrict to viewing balances and orders only | Enable/Disable |
| Position Limits | Set maximum position size | Custom amount in USD or asset |
When creating a new sub-account, start with restricted permissions (e.g., disable withdrawals, limit API access). You can always increase permissions later as needed.
Step 5: Create and Fund the Sub-account
After creation, you'll need to transfer funds from your main account to the sub-account. This is typically done through a transfer function in the exchange interface.
Step 6: Set Up Access for Team Members
If you're creating sub-accounts for team members, provide them with the sub-account login credentials (or create login credentials for them). Some exchanges allow you to set up email logins for each sub-account.
Step 7: Configure API Keys (if needed)
If the sub-account will be used for automated trading, create API keys with the appropriate permissions. Restrict API keys to specific IP addresses and avoid granting withdrawal permissions.
Step 8: Test the Sub-account
Test the sub-account by placing a small trade or making a small transfer to verify that permissions are correctly configured.
Funds in sub-accounts are separate from your main account. You must transfer funds from the main account to the sub-account before trading. Withdrawals from sub-accounts may require additional confirmation.
๐ Understanding Sub-account Permissions
Properly configuring permissions is the key to secure sub-account management. Here's a deeper look at each permission type:
- Spot Trading: Allows buying and selling on the spot market. Essential for most sub-accounts.
- Margin Trading: Allows leveraged trading. Use with caution โ it increases risk significantly.
- Futures/Perpetuals: Allows derivatives trading. Only enable for experienced traders who understand the risks.
- Withdrawals: Enables withdrawals to external wallets. Consider keeping this disabled for sub-accounts used only for trading.
- Transfers: Allows moving funds between sub-accounts and the main account. Useful for funding and profit consolidation.
- API Access: Allows creation of API keys for automated trading. Always restrict API permissions and IPs.
- View-Only: Restricts the account to viewing balances and positions only. Ideal for monitoring.
- Position Limits: Sets a maximum exposure per asset or in total. Crucial for risk management.
Always give sub-accounts only the permissions they need to function. For example, if a sub-account is for trading only, disable withdrawals and limit API access. This reduces the attack surface.
โ Sub-account Best Practices
- Use descriptive names: Name sub-accounts clearly (e.g., "Grid Trading Bot," "Team Alpha," "Test Environment") to avoid confusion.
- Implement the principle of least privilege: Only grant the permissions absolutely necessary for each sub-account's purpose.
- Regularly review sub-accounts: Periodically check all sub-accounts for unused or inactive accounts. Remove them to reduce risk.
- Separate trading strategies: Use different sub-accounts for different strategies (e.g., one for spot trading, one for futures). This makes performance tracking easier.
- Set position limits: For sub-accounts with high-risk strategies, set position limits to prevent excessive losses.
- Secure the main account: The main account is the master key. Ensure it has the highest level of security: strong password, 2FA, anti-phishing code, withdrawal whitelist, and login alerts.
- Monitor activity: Check sub-account activity regularly. Look for unusual trading patterns or unauthorized access.
- Use separate passwords: If the exchange allows, use different passwords for each sub-account to prevent cross-account compromise.
The main account is the most important security point. If the main account is compromised, all sub-accounts are at risk. Secure the main account with every available security measure.
๐ผ Common Use Cases for Sub-accounts
- Trading teams: Each team member has their own sub-account with limited permissions. The main account manages funding and oversight.
- Multiple strategies: Run different trading strategies in separate sub-accounts to track performance and isolate risk.
- API key isolation: Create separate sub-accounts for different API integrations (e.g., trading bots, portfolio trackers).
- Testing: Use a sub-account as a test environment for new strategies or bot configurations without risking main account funds.
- Client accounts: For fund managers or institutional traders, each client can have their own sub-account.
- Tax optimization: Separate trading activities to simplify reporting and tax calculation.
- Risk segregation: Isolate high-risk trading from conservative strategies to protect the main portfolio.
โ ๏ธ Common Pitfalls & How to Avoid Them
| Pitfall | Description | How to Avoid |
|---|---|---|
| Oversharing Permissions | Giving sub-accounts more permissions than they need (e.g., allowing withdrawals for a trading-only account). | Use the principle of least privilege. Start with minimal permissions and add only as needed. |
| Weak Main Account Security | Main account is the master key. If compromised, all sub-accounts are at risk. | Secure the main account with strong password, 2FA, anti-phishing code, withdrawal whitelist, and login alerts. |
| Unused Sub-accounts | Leaving unused sub-accounts active creates unnecessary risk. | Regularly review and remove inactive or unused sub-accounts. |
| Poor Naming | Using vague or confusing names for sub-accounts. | Use clear, descriptive names that indicate the purpose of each sub-account. |
| No Monitoring | Not monitoring sub-account activity for unusual behavior. | Regularly check sub-account activity logs and set up alerts if available. |