Required Legal Notice: Virtual currencies, real risks. The only guarantee in crypto is risk. Read more

Required Legal Notice: Virtual currencies, real risks. The only guarantee in crypto is risk. Warning: The value of your virtual currencies can rise or fall sharply, and your initial investment may be lost completely; virtual currencies are not covered by the guarantee funds that cover bank deposits; there is no legal mechanism on the virtual currencies market to prevent market manipulation or insider dealing; virtual currencies depend entirely on a specific computer technology and infrastructure, which in certain cases may be very recent and not yet adequately tested; if one loses the identification code or password giving access to the virtual wallet in which the virtual currency is stored, the currency held therein will be irretrievably lost; virtual currencies are currently accepted as a means of payment to a limited extent, and in most countries there is no legal obligation to accept them; for more information about the risks associated with an investment in virtual currencies, we advise you to read the Wikifin page What is a cryptocurrency? | Wikifin.

How does two-factor authentication (2FA) for API keys work?

Last updated: 31 сакавіка 2025 г.

Application Programming Interface (API) keys can be generated on your Kraken account to allow external applications permission to perform actions on your account such as trades, access account funding or track the data on your Kraken account.

Important Note: The Kraken Pro mobile app does not currently support API key 2FA, hence it is necessary to keep 2FA disabled for any API keys that will be used with Kraken Pro. Third party services may or may not support API key 2FA, so it is best to confirm with the service directly whether API key 2FA can be enabled or not. Attempting to use API key 2FA with an app or service that does not support 2FA would cause an EAPI:Invalid signature error (or a custom third party error about an authentication failure).

This article assumes that you are aware of the security risks involved in generating API keys for your account.

Two-factor authentication (2FA) is one way of reducing the risks of API keys.

How to set up 2FA for an API key

1
Sign in to your Kraken account.
2
Click on your name in the upper-right corner of the page.
3
Click on Security, then 2FA Settings.
4
Scroll down to the API Keys section and toggle the on/off button for the API key that you would like to add a 2FA for:
5
Select your 2FA option (2FA App or Password). F
or 2FA App, open the authenticator app on your device and either scan the QR code provided or manually enter the key by selecting View setup Key. Then, enter the numeric code that appears in the authenticator app and select Confirm.

If using the Password option (least secure), follow the instructions to set up a password and select Confirm.
6
Select the actions that Two-factor Authentication will be required for. Then, click Confirm to continue.
Note that the function selections are not currently enabled, so the 2FA code will be required for all API calls using this API key.
7
Congratulations, that's it! You have successfully set up 2FA for API key you selected
and you will see that it is now enabled.

How does two-factor authentication (2FA) for API keys work?

How to set up 2FA for an API key

Need more help?