The 4FX platform operates as a non-custodial service. Your 4FX account enables you to initiate and coordinate actions on your linked exchange accounts. However, it's important to note that you cannot withdraw funds either directly from 4FX or through 4FX.
4FX establishes connections with your exchange accounts through the use of API keys. We have implemented a robust security framework around API connections, offering three crucial layers of security measures that vary depending on the exchange you use:
Sign Center
The Sign Center serves as a highly secure API key repository, isolated at both the infrastructure and access levels to safeguard the integrity of our systems. When 4FX initiates a trade request with an exchange, our servers instruct the Sign Center to digitally sign the transaction. This protocol closely resembles how Metamask or Ledger signs a transaction.
When you generate an API key with your exchange, you have the option to specify an IP whitelist. This whitelist enables you to restrict the API key's usage to specific IP addresses. You can employ this tool to explicitly authorize official 4FX IP addresses while blocking access from any others. Importantly, an API key you create cannot be linked to any other account on 4FX, ensuring it cannot be utilized to initiate trades with your exchange account unless the request originates from your 4FX account.
Fast Connect
Some exchanges, with a focus on enhancing user experience, offer a feature known as Fast Connect. Fast Connect streamlines the process of granting specific account permissions, creating API keys, and seamlessly linking to third-party API integration platforms.
Fast Connect enables you to log in to your exchange account through the convenient 'quick connect' function on the 4FX platform. It can automatically generate API keys and associate them with our platform, allowing you to begin using 4FX services without the need for manual API key creation.
Transactional access only
Our system exclusively instructs your exchange account to open and close trading positions. It maintains zero access to initiate withdrawals or transfers of fiat or cryptocurrencies. Importantly, your exchange login credentials remain confidential and are never disclosed to our system. There is no backdoor or cache that can be exploited because our API intentionally lacks the capability to request any of your personal information from the exchange.
On top of using the three key secure connection protocols explained above, 4FX secures user data with tools from security services provider, including:
- Web Application Firewall
- DDOS attack protection
- SSL/TLS encryption between visitors and origin servers
1. When working with an exchange:
- Secure your exchange account with two-factor authentication (2FA).
- Save 2FA backup keys in a safe place.
- Use a strong and unique password/email for your exchange account.
- Don’t store secure API keys in a shared or accessible document.
- Don’t send your API keys via a message to yourself or anyone.
- Use separate API keys for different services.
- Connect exchange via Fast Connect if possible.
- Always be wary of phishing emails and ensure the authenticity of the sender — especially check those from your exchange providers.
- Set up alerts, like the one 4FX Premium subscribers use on Binance that can send them messages any time there's an external trade.
2. When creating an account on 4FX:
- Use an email address you are checking regularly (not a “spam address”)
- Use a strong and unique password different from your email address.
- Verify your email address (you will receive a link once you are registered).
- Enable 2FA for your account in Settings.
3. When using 4FX Platform:
- Hide your balance when you are sharing screenshots or your interface is viewable by others.
- Log out from 4FX Platform if you are giving access to your device to anyone else.
- Secure your device with a password or PIN, and don’t leave it unlocked.
- Don’t share your email_token in TradingView commands.
4. When working with mobile devices:
- Secure your smartphone with a PIN code or biometric measure.
- Never give your device to anyone while the trading app is opened or when your Google Authenticator app is accessible.
- Always ensure that your backup codes are retrievable in the event your phone is lost or stolen.
At 4FX Platform, we place an utmost priority on the security of our platform and user data. Given the alluring nature of blockchain and cryptocurrency services as potential targets for malicious attacks, we maintain a constant vigilance, assuming that malevolent actors may continuously attempt to compromise our platform and the community it caters to.
The security measures and protocols elucidated on this page reflect our ever-evolving commitment to thwart those who may try to exploit our customers, ensuring that we provide you with the highest level of security and protection possible.
The 4FX platform operates as a non-custodial service. Your 4FX account enables you to initiate and coordinate actions on your linked exchange accounts. However, it's important to note that you cannot withdraw funds either directly from 4FX or through 4FX.
4FX establishes connections with your exchange accounts through the use of API keys. We have implemented a robust security framework around API connections, offering three crucial layers of security measures that vary depending on the exchange you use:
Sign Center
The Sign Center serves as a highly secure API key repository, isolated at both the infrastructure and access levels to safeguard the integrity of our systems. When 4FX initiates a trade request with an exchange, our servers instruct the Sign Center to digitally sign the transaction. This protocol closely resembles how Metamask or Ledger signs a transaction.
When you generate an API key with your exchange, you have the option to specify an IP whitelist. This whitelist enables you to restrict the API key's usage to specific IP addresses. You can employ this tool to explicitly authorize official 4FX IP addresses while blocking access from any others. Importantly, an API key you create cannot be linked to any other account on 4FX, ensuring it cannot be utilized to initiate trades with your exchange account unless the request originates from your 4FX account.
Fast Connect
Some exchanges, with a focus on enhancing user experience, offer a feature known as Fast Connect. Fast Connect streamlines the process of granting specific account permissions, creating API keys, and seamlessly linking to third-party API integration platforms.
Fast Connect enables you to log in to your exchange account through the convenient 'quick connect' function on the 4FX platform. It can automatically generate API keys and associate them with our platform, allowing you to begin using 4FX services without the need for manual API key creation.
Transactional access only
Our system exclusively instructs your exchange account to open and close trading positions. It maintains zero access to initiate withdrawals or transfers of fiat or cryptocurrencies. Importantly, your exchange login credentials remain confidential and are never disclosed to our system. There is no backdoor or cache that can be exploited because our API intentionally lacks the capability to request any of your personal information from the exchange.
On top of using the three key secure connection protocols explained above, 4FX secures user data with tools from security services provider, including:
- Web Application Firewall
- DDOS attack protection
- SSL/TLS encryption between visitors and origin servers
1. When working with an exchange:
- Secure your exchange account with two-factor authentication (2FA).
- Save 2FA backup keys in a safe place.
- Use a strong and unique password/email for your exchange account.
- Don’t store secure API keys in a shared or accessible document.
- Don’t send your API keys via a message to yourself or anyone.
- Use separate API keys for different services.
- Connect exchange via Fast Connect if possible.
- Always be wary of phishing emails and ensure the authenticity of the sender — especially check those from your exchange providers.
- Set up alerts, like the one 4FX Premium subscribers use on Binance that can send them messages any time there's an external trade.
2. When creating an account on 4FX:
- Use an email address you are checking regularly (not a “spam address”)
- Use a strong and unique password different from your email address.
- Verify your email address (you will receive a link once you are registered).
- Enable 2FA for your account in Settings.
3. When using 4FX Platform:
- Hide your balance when you are sharing screenshots or your interface is viewable by others.
- Log out from 4FX Platform if you are giving access to your device to anyone else.
- Secure your device with a password or PIN, and don’t leave it unlocked.
- Don’t share your email_token in TradingView commands.
4. When working with mobile devices:
- Secure your smartphone with a PIN code or biometric measure.
- Never give your device to anyone while the trading app is opened or when your Google Authenticator app is accessible.
- Always ensure that your backup codes are retrievable in the event your phone is lost or stolen.
At 4FX Platform, we place an utmost priority on the security of our platform and user data. Given the alluring nature of blockchain and cryptocurrency services as potential targets for malicious attacks, we maintain a constant vigilance, assuming that malevolent actors may continuously attempt to compromise our platform and the community it caters to.
The security measures and protocols elucidated on this page reflect our ever-evolving commitment to thwart those who may try to exploit our customers, ensuring that we provide you with the highest level of security and protection possible.