Profile

The Profile page holds your personal settings and the security options of your account: profile details, password, two-factor authentication, passkeys, API tokens and installing BitMe as an app.

Turning on two-factor authentication is recommended. It is also required to enable trading from BitMe (Manage Positions), to change your password when it is on, and to enable live orders in Strategies.

Set your photo, display name, language, theme and timezone on the Profile page. Display name and timezone save by themselves when you leave the field or pick a value, and a short confirmation appears; the Save button does the same on demand.

• Avatar. Press Upload photo and choose a JPEG, PNG or WebP photo of up to 3 MB. It is cropped to a square and shown on the page and in the app header. Remove it to fall back to your initials.
• Display name. Shown on the dashboard and in the app header. It does not affect how you sign in.
• Language. Switches the whole interface between English and Polish. It takes effect on the next page load.
• Theme. Switches between dark and light immediately, with no reload.
• Timezone. Used to format timestamps in Telegram alerts and in trade details. Press Detect to fill in your browser's timezone automatically.

Enter your current password and a new one of at least 8 characters.

If two-factor authentication is on, a 6-digit code from your authenticator app is also required; a prompt appears after you press Change Password. After a successful change the fields are cleared.

Use the Forgot password link on the sign-in page to get a one-time email link and set a new password.

1. On the sign-in page press Forgot password? and enter your email.
2. We send an email with a link. It works once and expires after 1 hour.
3. Open the link, enter a new password of at least 8 characters and save.

For security the page gives the same answer whether or not an account exists for that email, so nobody can use it to check who is registered. You can request a link up to three times in 15 minutes. If the email does not arrive, check your spam folder and the address you typed.

If you are signed in and just want to change the password, use Change password on the Profile page instead.

Two-factor authentication adds a second verification step after your password.

1. Press Enable 2FA and scan the QR code with an authenticator app such as Google Authenticator, Authy or 1Password.
2. Enter the 6-digit code to confirm.

When you enable it, BitMe generates 8 single-use recovery codes. Save them somewhere safe, then press I've saved my recovery codes. If you lose access to your authenticator app, one of them lets you sign in.

To disable 2FA, enter your current password and press Disable 2FA.

2FA must be on before you can turn on trading from BitMe (Manage Positions on an exchange card). When it is active, a code is also required to confirm changing your password, enabling Manage Positions and enabling live orders in Strategies.

Passkeys let you sign in with Face ID, Touch ID or Windows Hello, with no password or 2FA code.

• Press Add Passkey and follow your device's prompt.
• A passkey is tied to the device it was created on. You can register several, for example an iPhone and a MacBook.
• Signing in with a passkey does not ask for a 2FA code, because biometric verification counts as a strong second factor.
• If you remove all passkeys, signing in with email and password (and 2FA, if enabled) keeps working as before.

2FA must be enabled before you can add a passkey. This keeps your account protected if you lose the passkey.

API tokens let an external client, such as a home screen widget, read your open positions without signing in to the web app.

Create a token on the Profile page: enter a label (for example iPhone Widget) and press Generate Token. Then press Copy Token, or Copy Widget Script for a ready-made widget script for the Scriptable app on iPhone (one example; any client that can send the request below works), and Done when you have copied it. The token is shown only once; if you lose it, revoke it and create a new one. Revoking a token cuts off that client's access immediately. A token is read-only: it can fetch positions, and can never place or close trades or change settings.

Request:

GET https://bitme.trade/api/v1/positions
Authorization: Bearer {token}

Response:

{ok, positions: [{exchange, symbol, side, size, entry, mark, cost, pnl, pnl_pct}, ...]}

Add ?summary=1 to get a ready-made aggregate instead of the full list, useful for clients that cannot sum arrays or format values themselves:

{count, pnl, pnl_pct, pnl_fmt, pnl_pct_fmt, btc_price, btc_price_fmt, positions_line, marks_line}

The *_fmt fields are ready-to-display strings with sign and currency or percent, and positions_line is every position combined into one string. marks_line lists the current mark price of every open position the same way, preceded by a first line with just the BTC price.

The limit is 30 requests per 60 seconds per token.

Add BitMe to your home screen for instant access, with no browser bar and faster loading.

• Android, Chrome or Edge: press Install BitMe when the browser offers it.
• iPhone or iPad, Safari: tap the Share button, then Add to Home Screen.
• Desktop: click the install icon in the Chrome or Edge address bar.

Delete your account from the bottom of the Profile page. It is switched off immediately and erased permanently after 7 days, and signing in during that time undoes it.

1. On the Profile page open the Delete account card at the bottom.
2. Enter your password, type your email address to confirm and, if two-factor authentication is on, a 6-digit code. Press Delete my account.

What happens

• Right away the account is switched off: you cannot sign in as usual, alerts and monitoring stop and API tokens stop working. Your data is still stored.
• Undo it. During the 7 days, sign in with your password. BitMe shows that the account is being deleted and offers Undo deletion and sign in. Passkeys and the password reset link do not work for a switched-off account; if you cannot sign in, contact us.
• A reminder is emailed about a day before the deletion.
• After 7 days your profile, saved exchange API keys, trade history, settings and API tokens are erased permanently.

Your exchange is not touched

BitMe does not close positions or cancel orders. Open positions and pending orders stay exactly as they are, and BitMe stops managing them. Manage or close them on the exchange yourself and revoke the API key there.

The card is not shown for the demo account.