Kraken 2FA setup
Kraken has supported standard TOTP for years — a long-supported factor that stops account takeovers cold. Worth knowing: Kraken's highest-rated factor today is a passkey/security key, and the TOTP factor is scoped per “facet” (sign-in, trading, funding), so one enrollment is only the start.
Fact-checked against Kraken's official documentation · last reviewed 7 November 2026 · how we review guides
Open the generator for KrakenStep by step
- 01
Open Kraken security settings
Sign in at kraken.com → click your profile icon → “Security” → “Sign-in Two-Factor Authentication (2FA)”. Kraken lists separate facets like Sign-in, Trading, Funding, Master key (Trading/Funding/Master-key facets live under Advanced Settings).
- 02
Add the authenticator-app factor
Under the Sign-in 2FA section, click “Enable” next to “Authenticator app” — that’s the facet that stops account takeovers on the login page itself.
- 03
Reveal the secret
Kraken shows the QR plus a Base32 “secret key” line for manual entry. Copy the key (or screenshot the QR and paste it into the page — the parser reads it locally).
- 04
Generate, verify, activate
Paste into 2facounter.com, copy the live code, and paste it back into Kraken’s confirmation field. The facet flips to “Active” and codes are now required per that facet.
- 05
Harden the rest
Add Kraken’s Master Key, enable withdrawal address whitelisting, and keep the separate secrets for sign-in and Master key in your password manager. Kraken also offers a support phrase for identity verification when contacting support.
FAQ
Do I need the Kraken mobile app for 2FA?
No. Kraken’s TOTP factor is standard RFC 6238 — any authenticator works, including a purely browser-based one. The mobile app is one carrier, not a requirement.
What are Kraken’s “facets” for 2FA?
Kraken lets you require separate factors for logging in, for trading, for funding (withdrawals), and for account-level changes (Master key). Stronger setups have sign-in on TOTP and the Master key on a *different* secret — you can maintain both recent-key slots in this generator.
What is the Global Settings Lock?
Kraken’s GSL (Global Settings Lock) freezes security-critical settings — 2FA changes, password resets, withdrawal addresses — until you explicitly unlock it. Set it up after today’s enrollment: even someone with your password and phone can’t then quietly rewire the account.
Codes rejected right after setup — what broke?
Clock drift almost always. Kraken validates codes within a window: if your system clock is even ~30 s off, every guess fails. Set your OS to sync time automatically, wait for the next step, and try once more.