The device approval code is a six digit code we will send to your email when a new device is detected as signing into your account. This is not to be confused with your Sign-in 2FA code. We added this security feature as many account takeovers are done by a phishing attack where an attacker intercepts a client’s sign-in details and uses them to sign in from the attacker’s device.
Before this feature was added, if you were phished and an attacker obtained your username, password and even dynamic 2FA code, the attacker could access your account by visiting our sign-in page and quickly entering the credentials you mistakenly provided them.
This additional code is an added layer of security to protect you against phishing attacks.
When you sign in, you may see a screen telling you that we’ve detected an unrecognized device. The code will be sent to your email along with what you will need to submit in order to approve your device. You will only need to do this for new devices, so if you only access Kraken from a single device you won’t likely see this step when signing in again.
Please note that if the attacker also has access to your email, they might be able to approve their device – this is one of the many reasons to make sure the email associated with your Kraken account is very secure, by adding 2FA to your email service.
Device approval troubleshooting
If you are having trouble getting past the device approval page, be certain you are using the code that we sent to your email. Do not use your Sign-in 2FA, this is a separate security code and not specific to the device that you are using to access Kraken.
If you don’t see the email in your inbox, be sure to check your spam folder and search your mail folders for our sending email address firstname.lastname@example.org. See this article for further tips on troubleshooting email delivery issues.
For information on how to manage and see what devices are connected to your account, please see this article.
Lastly, click here for more information about securing your account and digital life.