Looking to set up Two-factor Authentication (2FA)?
Find out how in our step-by-step article.
An authenticator app is usually installed on a smartphone and generates a 6-8 digit code every 30 seconds. The code can be used for signing in, trading, depositing or withdrawing funds from your account or as a Master Key.
Note:
- For security reasons, 2FA for each of these account actions needs to be set up separately.
- Sign-in 2FA and Master Key should always be kept separate.
How does an authenticator app work?
The secret key provided at the time of download is all that is needed for backup.
Note: authenticator apps are not tied in any way to your SIM card or phone number and that improves security by protecting your account from SIM swapping.
Where can I get an authenticator app?
A popular example is Google Authenticator, which can be found in Google Play and the iOS App Store.
Security tips for using an authenticator app?
Be sure to enable remote locking and erasing of your smartphone in case you ever lose it.
Google Authenticator account synchronization
The Google Authenticator app was used to store one time password on only the primary device. This meant that if you lost access to your device, you would not be able to access any of your accounts secured with the 2FA mechanism. Now, the Account Synchronization feature for Google Authenticator lets you backup your 2FA codes to the cloud which allows you to access the code from other devices.
While this feature is a convenient option, it can leave you vulnerable to risks. Anyone who has access to your Google Account device may easily access any 2FA code synched to it and gain access to all associated accounts.
How to disable Google Authenticator sync feature?
You can disable this feature by following these steps:
- 1On your device, open the Google Authenticator app.
- 2Tap your profile photo.
- 3Hit Use without an account.
- 4Tap Continue.
To ensure your Kraken account and email is as secure as possible, please review the steps in this support article: Securing your email address
Alternatives to an authenticator app?
Hardware Security Keys are considered to be both more convenient and more secure.