Kraken provides a security feature called the Global Settings Lock (GSL). It is a security feature that:
- Prevents changes from being made to your Kraken account.
- Hides sensitive account information.
Important
Before setting up a GSL, be sure to create a Master Key in case you change your mind. A Master Key has the ability to turn the GSL off at any time. Kraken support is unable to expedite the GSL unlock process.
Note: While the Master Key override option can be convenient, it comes with an increased security risk if your Master Key is compromised.
- Sign in to your Kraken account and select your name in the upper-right corner of the page.
- Select Settings and click Security.
- Select Lock in the GSL settings.
- Set the required waiting period to unlock the GSL without a Master Key.
- Select Lock settings which will enable the Global Settings Lock and complete the set up.
- The Settings page of your account will display this banner.
Warning
Warning: The Master Key can only be created before the GSL is turned on. Once GSL is on, you will not be able to create a Master key as that is the entire point of the GSL. Our support team is unable to assist with GSL removal if the unlock process is set between 1-30 days.
GSL Prevents:
- Adding withdrawal bank account
- Adding withdrawal address (crypto)
- Increasing your verification level
- Changing your password
- Changing your email address
- Adding or changing any 2FA
- Adding or changing the master key
- Adding or changing the PGP public key
- Adding or changing API keys
GSL Hides:
- Security page
- Documents page
- Email Address
GSL Shows:
- Trading & ledger history
- Balances
The GSL is particularly useful when you're on vacation or not planning to use your Kraken account for a while.
However, the GSL is still important even for regular, active clients. Without the GSL enabled, an attacker who gains access to your account can turn off or change Two-factor Authentication (2FA) for sign-in, funding, trading and the Master Key.
For example, you may have set up trading 2FA, but if an attacker compromises your account and you did not have the GSL on, they can simply turn the trading 2FA off and then proceed to perform trades on your account.
To remove the GSL, a request needs to be made again on the Settings tab. The set number of days will then need to pass before the unlock will be complete.
An email notification is sent as soon as an unlock request is made.
While the Master Key override option can be convenient, it comes with an increased security risk if your Master Key is compromised.