IMPORTANT:
After enabling 2FA for withdrawals, you must also enable the Global Settings Lock (GSL) or a sign-in 2FA in order for it to be effective. Once a change to your Kraken account is requested, you will be prompted to confirm your sign-in 2FA again via the 6-digit code from your authenticator app or via your Hardware Security Key.
The code must be entered correctly before any changes can be made to the 2FA settings on your account. If you choose not to use sign-in 2FA, you must enable the GSL. Without the GSL, the withdrawals 2FA can be easily removed or changed by anyone who gains access to the account.