Key facts
- You sign one message to register a session key; it lasts 30 days.
- The key can open and close positions only.
- It cannot withdraw, stake, unstake or claim; those need your wallet.
- Gas for trades is paid by the protocol's relayer, not by you.
What happens when you enable trading
When you click Enable trading in the terminal, your browser creates a fresh key pair and your wallet signs one message that registers its public address on your account. The private part stays in your browser's local storage. From then on, each open or close is signed by that key and sent to Papertrade's relayer, which submits it on-chain and pays the gas.
What a session key can do
- Open positions on your account, using your available or queued balance.
- Close positions on your account.
What it cannot do
- Withdraw funds. Withdrawals always need your wallet's own signature.
- Stake, unstake or claim PAPER rewards.
- Move funds to another account.
The worst case if someone stole the key is that they could trade on your account and lose your balance in trades. They could not withdraw it. Treat the browser you trade in with care, and do not trade on shared computers.
How long it lasts
Session keys last 30 days. Each trade the key signs is valid for one hour, so the terminal asks you to sign a new key once the current one has less than an hour left. If you clear your browser data or switch devices, simply enable trading again; the old key just expires.
How to revoke a key early
You can revoke a session key at any time by calling revokeSessionKey on Papertrade's SessionKeyManager contract from your wallet. It is a HyperEVM transaction, so it needs a small amount of HYPE for gas. Any trades the key signed that are still waiting are cancelled.
Try it with a small size first
Connect a wallet, deposit at least 10 USDC and start with low leverage.