Reviewed guide | 2026-10-10
Just Deposited on Bybit? Custody Settings to Switch On Before You Trade
Your first Bybit deposit is the moment your account starts holding real value. These custody settings limit where funds can move and who can access them, and take minutes to enable.
Bybit | the reader's region | the reader's funding currency | deposits, networks and withdrawal controls
Many people complete their first Bybit deposit and go straight to trading. The account now holds real value, but the settings that control where that value can move are often still at their defaults. Taking a few minutes right after the first deposit to configure custody controls dramatically reduces what an intruder could do with a stolen password. This guide lists the settings to enable and explains why each one matters for funds held on the exchange.
Withdrawal address allowlist
Enable the allowlist so withdrawals can only go to addresses you have saved. Add your own wallets with clear labels showing wallet name and network. New addresses may require extra verification and a waiting period, which gives you time to react if someone else tries to add one. Check the help centre for the current rules on adding and using new addresses. Remove any test or temporary address once you no longer need it, so the list only contains destinations you would genuinely send to today.
Strong verification for sensitive actions
Make sure withdrawals and security changes require an authenticator or passkey rather than only an email or SMS code. Write down the authenticator backup key on paper and store it away from your phone. If your account allows a passkey on a second device, register one there as a fallback in case your main phone is lost.
Separating funds with sub-accounts
If you plan to use bots or experiment with futures, consider a sub-account for that activity, keeping most of your deposit in an account with no API keys attached. This limits the damage from a compromised key or an aggressive strategy. Transfers between sub-accounts are internal and quick, so separation costs little convenience. Give each sub-account a name that describes its purpose, and write down which one holds your main balance so you never connect a bot to it by mistake.
Alerts and periodic review
Turn on alerts for logins, withdrawals, new devices and security changes, and confirm that notifications reach your phone. Set an anti-phishing code so genuine emails are easy to recognise. Once a month, review active devices, API keys and allowlisted addresses. If anything appears that you do not recognise, change your password from a trusted device and contact support through the official app straight away. These habits keep the protections current as your use of the account grows.
Risk boundary: Bybit Deposit Guide
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- Enable the withdrawal allowlist right after your first Bybit deposit.
- Require an authenticator or passkey for withdrawals and security changes.
- Keep most funds in an account with no API keys or bots attached to it.
- Review devices, API keys and saved addresses once every month.
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat.