Log into your account at https://hitbtc.com/, then go to "Settings" in the right upper part of the site.
Switch tab to "API keys".
Click on "New API key".
Write down Secret Key as it'll be hidden later.
Select permissions as on the image below. Enabling "Place/cancel orders" will require security confirmation by an email or 2FA.
API & Secret keys are ready for use.
If you need to delete the key for some reasons, click on "Del".