Enabling two-factor authentication (2FA)

Two-factor authentication (2FA) adds an extra layer of security to your account, in addition to your username and password.

If you haven’t already enabled sign-in 2FA, you’ll be prompted to set it up the next time you log in.

A passkey is a digital credential stored on your device used for additional security next to your password and is considered to be one of the most secure methods of 2FA. Passkeys can be used to satisfy sign-in 2FA, securely logging you into your account by using biometric authentication like a fingerprint or face scan, or a screen lock PIN.

The available options are:

Passkeys:

  1. 1

    In the top right corner of your screen click on your profile icon. Under Settings tap Security.

  2. 2

    Here you’ll see available 2FA methods. Tap Passkeys.

  3. 3

    To add a new Passkey, tap the Add passkey button. 

  4. 4

    Next, tap Use passkey. 

  5. 5

    Select iPhone, Ipad or Android device and tap Continue. 

  6. 6

    Scan the QR code and follow the instructions on your device.

Hardware Security Key:

  1. 1

    In the top right corner of your screen click on your profile icon. Under Settings tap Security.

    Here you’ll see available 2FA methods. Tap Passkey followed by Add passkey.

  2. 2

    Tap Use passkey. 

  3. 3

    Tap Use a phone, tablet or security key. Enter your security key to continue.

An authenticator app is usually installed on a smartphone and generates a 6-8 digit code every 30 seconds. The code can be used for signing in, trading, depositing or withdrawing funds from your account or as a Master Key. 

Note: 2FA for each of these account actions needs to be set up separately.

2FA ensures that:

✓ Unauthorized access is stopped if your username and password are stolen.

✓ Your account can only be accessed by the holder of the device that has the 2FA code.

✓ Every time you sign in, your device creates a unique passcode that is required for accessing your account.

✓ Once signed in, you are the only person who can perform certain actions such as trading, withdrawing or depositing.

2FA requires an extra passcode when signing in, trading, withdrawing or depositing. This passcode can be stored in an authenticator app on your phone where the passcode changes every 30 seconds. Or in a Hardware Security Key where the passcode changes after each use and can even recognize the website that you are trying to sign into.Enabling sign-in 2FA also activates Step-up 2FA. This is an extra step that is required anytime that 2FA settings on your account are added, edited or removed.

Once a change to your Kraken account is requested, a popup window will appear to confirm your sign-in 2FA again via the 6-digit code from your authenticator app or via your Hardware Security Key. Without the Step-up 2FA code no changes can be made, even if somebody managed to sign into your account without your permission.

Need more help?