How to set up an OKX Sub-account? (Asset isolation)

Understanding OKX Sub-accounts

1. OKX sub-accounts are independent account structures created under a single master account, each with its own unique login credentials and API keys.

2. Each sub-account operates with strict asset isolation—funds, positions, and margin balances cannot be shared or transferred between sub-accounts without explicit manual withdrawal and deposit actions.

3. Sub-accounts support all major OKX services including spot trading, futures, options, and staking, but permissions must be individually configured per sub-account.

4. The master account retains full administrative control, including the ability to create, suspend, or delete sub-accounts at any time.

5. Sub-account activity is fully auditable through the master account’s transaction history and real-time monitoring dashboard.

Step-by-step Creation Process

1. Log in to your OKX master account via web or desktop application—mobile app support for sub-account creation is limited and not recommended for production use.

2. Navigate to the “Assets” section, then select “Sub-accounts” from the left-hand menu.

3. Click “Create Sub-account”, enter a descriptive name (e.g., “Arb-Bot-Futures”, “Cold-Staking-01”), and choose the required permission level: “Read-only”, “Trading”, or “Full Access”.

4. Confirm identity via SMS or Google Authenticator—two-factor authentication is mandatory for every sub-account creation event.

5. After confirmation, OKX generates a unique sub-account ID and displays initial login instructions, including a one-time password reset link valid for 15 minutes.

Asset Isolation Mechanics

1. Assets deposited into a sub-account remain exclusively within that sub-account’s balance ledger—no automatic synchronization occurs with the master or other sub-accounts.

2. Withdrawals from a sub-account require explicit approval by the master account holder if withdrawal whitelisting is enabled; otherwise, only the sub-account’s designated 2FA device can authorize outbound transfers.

3. Futures margin calls are resolved solely using the sub-account’s isolated margin balance—even if the master account holds surplus USDT, it cannot auto-cover deficits.

4. API keys generated for a sub-account inherit its permission scope and cannot access assets or order books outside its designated scope.

5. Internal transfers between sub-accounts are disabled by default and must be routed manually through external wallet addresses or master-account-mediated deposits.

Security Configuration Best Practices

1. Assign distinct Google Authenticator instances for each sub-account—reusing the same TOTP seed across multiple sub-accounts violates isolation principles.

2. Disable API key creation for sub-accounts intended only for manual trading; enable it only when algorithmic execution is required.

3. Set daily withdrawal limits per sub-account based on operational needs—excessively high limits increase exposure during credential compromise.

4. Regularly audit sub-account login locations and IP ranges using the “Security Logs” tab accessible only from the master account interface.

5. Never share sub-account credentials with third-party tools unless their codebase has undergone formal OKX security review and supports hardware wallet signing.

Frequently Asked Questions

Q: Can a sub-account trade on OKX Earn products?Yes, but only if the master account has enabled “Earn Access” during sub-account creation and the sub-account holds supported assets in its spot wallet.

Q: Do sub-accounts have separate KYC levels?No. All sub-accounts inherit the master account’s KYC tier—verification status, withdrawal limits, and jurisdictional restrictions apply uniformly.

Q: Is there a fee to create or maintain a sub-account?OKX does not charge any setup, maintenance, or dormant fees for sub-accounts regardless of usage frequency or balance size.

Q: Can I recover a sub-account if I lose its 2FA device?Recovery requires master account authorization plus email/SMS verification—no self-service recovery exists for sub-accounts to preserve asset isolation integrity.