# Linking your Polymarket account

**How the Polymarket signer key onboarding works, what we store, and why you cannot lose funds through us.**

Section: Getting started · Last updated: 2026-07-28

---

## The security model in one paragraph

Polymarket exposes a **signer key** — a separate credential from your main wallet — that authorises order placement and position reads, but NOT withdrawals. You paste this key into Polyterminus once. We encrypt it at rest with AES-256-GCM, key held in Google Secret Manager. Every order we send to Polymarket is signed with your key on-the-fly. If we vanished tonight, your funds and open positions on Polymarket would be exactly where you left them.

## Step-by-step

  - Open [polymarket.com/profile](https://polymarket.com/profile) and log in.
  - Find the API keys / signer section (Polymarket changes location occasionally — search "API" in the settings).
  - Create a new signer key. Save it somewhere safe.
  - Return to [app.polyterminus.com/app/onboarding](https://app.polyterminus.com/app/onboarding).
  - Paste the key. We show you the wallet address it maps to for confirmation.

## What can Polyterminus do with the key?

  - ✅ Place BUY / SELL orders
  - ✅ Cancel orders
  - ✅ Read your positions and balances
  - ❌ Withdraw USDC or move funds off Polymarket
  - ❌ Sign non-order transactions

## What we store

  - Your **encrypted** signer key (AES-256-GCM, key in Secret Manager)
  - Your Polymarket wallet address (public — nothing sensitive)
  - Order history that you generated through Polyterminus (for the ledger)

## How to revoke

Rotate or delete the signer key on Polymarket's side. Instantly Polyterminus loses trading access. We also expose a "Disconnect" button in Account → Polymarket that deletes our copy of the encrypted key.