Sign-in 2FA required to use & activate Step-up 2FA:
For Step-up 2FA to be effective, you must have sign-in 2FA enabled on your account! If you don’t have this security feature enabled yet, we strongly encourage you to do so. Read here for more info on how to set it up.
Step-up 2FA is an extra step that is required anytime you want to add, edit or remove any 2FA settings on your account. Once a change to your Kraken account is requested, you will be prompted to confirm your sign-in 2FA again via the 6-digit code from your authenticator app or via your Hardware Security Key. The code must be entered correctly before any changes can be made to the 2FA settings on your account.
If enabled, Passkeys and/or Master Key can be selected as Step-up 2FA methods for approving changes to your 2FA settings.
Note: If you have the Global Settings Lock (GSL) enabled, you won’t be able to change any of your security settings and Step-up 2FA won’t be displayed or available as the GSL is considered the strongest security feature we currently offer.