Getting Started4 min readUpdated September 2026
How to Connect Your Deriv Account via API Token or OAuth Securely
Security protocol for safe authentication between automated trading platforms and Deriv.
Marcus Vance
Principal Low-Latency Systems Architect • E-E-A-T Verified
Audited for 2026
Executive Summary & Practical Insights
Understand the difference between OAuth 2.0 PKCE and manual API tokens, and how to keep your capital safe.
1. Why OAuth 2.0 Outperforms Manual Tokens
ATrader prioritizes official Deriv OAuth 2.0 PKCE authentication. Traders never have to copy and paste sensitive keys: authorization happens inside Deriv encrypted environments.
No-Code Automation
Trade this strategy on Deriv with 14 cloud bots, 100% free.
Start with $10,000 USD virtual demo balance with zero financial risk.
2. Scope Best Practices
If generating a manual API token in Deriv, never check "Admin" or "Payments". Only select "Read" and "Trade" permissions.
Frequently Asked Questions (FAQ)
Can ATrader withdraw my money or access bank details?
Never. Authorization is strictly constrained to reading balances and dispatching trade contracts. Withdrawal and admin permissions are completely locked.
What should I do if I suspect my token was compromised?
Simply access your Deriv security settings and delete the token with 1 click.