How to prevent unwanted withdrawals – Kraken

Kraken provides a security feature called the Global Settings Lock (GSL). It is a security feature that:

Prevents changes from being made to your Kraken account.
Hides sensitive account information.

Important

Before setting up a GSL, be sure to create a Master Key in case you change your mind. A Master Key has the ability to turn the GSL off at any time. Kraken support is unable to expedite the GSL unlock process.

Note: While the Master Key override option can be convenient, it comes with an increased security risk if your Master Key is compromised.

How to setup the Global Settings Lock (GSL)

Sign in to your Kraken account and select your name in the upper-right corner of the page.
Select Settings and click Security.
Select Lock in the GSL settings.
Set the required waiting period to unlock the GSL without a Master Key.
Select Lock settings which will enable the Global Settings Lock and complete the set up.
The Settings page of your account will display this banner.

You will be notified via email of any attempted unlock of the GSL on your account. The waiting period is the amount of time you'll have to take action in the event of a compromise. However, it's also the amount of time you'll have to wait yourself if you lose your Master Key (or if you never set one up in the first place).

Warning

Warning: The Master Key can only be created before the GSL is turned on. Once GSL is on, you will not be able to create a Master key as that is the entire point of the GSL. Our support team is unable to assist with GSL removal if the unlock process is set between 1-30 days.

What actions are affected by the GSL?

GSL Prevents:

Adding withdrawal bank account
Adding withdrawal address (crypto)
Increasing your verification level
Changing your password
Changing your email address
Adding or changing any 2FA
Adding or changing the master key
Adding or changing the PGP public key
Adding or changing API keys

What information is affected by the GSL?

GSL Hides:

Security page
Documents page
Email Address

GSL Shows:

Trading & ledger history
Balances

Note: Personal information, such as your name and address, is no longer viewable on Kraken accounts even when GSL is off.

Who should use the Global Settings Lock?

Since the entire purpose of the GSL is to prevent account changes, the GSL should be enabled once you have finished setting up, verifying, and customising your account.

The GSL is particularly useful when you're on vacation or not planning to use your Kraken account for a while.

However, the GSL is still important even for regular, active clients. Without the GSL enabled, an attacker who gains access to your account can turn off or change Two-factor Authentication (2FA) for sign-in, funding, trading and the Master Key.

For example, you may have set up trading 2FA, but if an attacker compromises your account and you did not have the GSL on, they can simply turn the trading 2FA off and then proceed to perform trades on your account.

How does the Global Settings Lock work?

The GSL can be enabled on the Settings tab of Kraken accounts, along with an option to set the waiting period for the unlock process.
To remove the GSL, a request needs to be made again on the Settings tab. The set number of days will then need to pass before the unlock will be complete.

An email notification is sent as soon as an unlock request is made.

Master Key override

A Master Key (if set up prior to the GSL) can be used to immediately remove the GSL.

While the Master Key override option can be convenient, it comes with an increased security risk if your Master Key is compromised.

Important

Warning

Related articles