What is the Global Settings Lock (GSL)?

Last updated: 9. marraskuuta 2026

The Global Settings Lock (GSL), when enabled, acts as the last line of defense if your sign-in password and Sign-in 2FA are compromised.

The GSL:

  1. 1

    Prevents changes being made to your Kraken account. This is a security feature designed to protect your account from unauthorized modifications.

  2. 2

    Hides sensitive account information.

You will also be notified via email of any attempted unlock of the GSL on your account. Depending on the unlock period you choose (1 to 29 days; the default is 3 days), a GSL unlock without a Master Key takes at least that long, and Kraken Support can’t shorten it. This gives you time to take action in the event of a compromise.

Frequently asked questions

Since the entire purpose of the GSL is to prevent account changes, the GSL should be enabled once you have finished setting up, verifying, and customizing your account, including your Sign-in 2FA and Master Key. The GSL is particularly useful when you’re on vacation or not planning to use your Kraken account for a while. However, the GSL is still important even for regular, active clients. Without the GSL enabled, an attacker who gains access to your account can turn off or change your Sign-in 2FA, Funding 2FA, Trading 2FA and Master Key.

For example, you may have set up Trading 2FA, but if an attacker compromises your account and you did not have the GSL on, they can simply turn it off and then proceed to perform trades on your account.

You can turn on the GSL in your Security settings on kraken.com, in the Kraken app and in Kraken Pro. Under Advanced Settings, select Activate, then choose your Unlock period.

To remove the GSL, go to your Security settings and select Deactivate. Unless you use your Master Key, the unlock period you chose must pass before the GSL is removed. An email notification is sent as soon as an unlock request is made.

Learn how to set up the GSL.

Master Key override

A Master Key set up before the GSL can be used to remove the GSL immediately. We recommend using a Passkey as your Master Key, and keeping it on a different device from your Sign-in 2FA. For example, if your Sign-in 2FA Passkey is on your phone, create your Master Key Passkey on a Hardware Security Key.

GSL Hides:

  • •

    Information on the Security page

  • •

    Documents page

GSL Shows:

  • •

    Trading & ledger history

  • •

    Balances

GSL Prevents:

  • •

    Adding withdrawal bank account

  • •

    Adding withdrawal address (crypto)

  • •

    Increasing your verification level

  • •

    Changing your password (while logged in)

  • •

    Changing your email address

  • •

    Adding or changing any 2FA

  • •

    Adding or changing the Master Key

  • •

    Adding or changing the PGP public key

  • •

    Adding or changing API keys

Suppose, for example, that you turn on the GSL with the unlock process set to take seven days.

An attacker then compromises your computer and logs in to your Kraken account.

The attacker attempts to add their own Bitcoin withdrawal address to your account to steal your funds. When the attacker realizes that they cannot add a withdrawal address because the GSL is on, the attacker requests to unlock your settings. 

You immediately receive an email notification of the unlock request, and have seven days to sign in, re-lock the GSL, and contact Kraken Support.