Account security is a trading risk because a compromised account can turn a profitable strategy into a total-loss event. Kraken’s help center explains that passkeys are stored on the user’s device and can satisfy sign-in 2FA through biometrics, screen lock or a hardware security key. It also notes that authenticator-app codes can be used for sign-in, trading, deposits, withdrawals or a Master Key, but each function is configured separately.
The important distinction is funding 2FA. Kraken says withdrawal 2FA can require an additional code for moving funds out of the account and for transfers to a futures wallet, but it does not by itself prevent the addition of new crypto withdrawal addresses. For that, Kraken points users to Global Settings Lock, and warns that withdrawal 2FA should be paired with GSL or sign-in 2FA to remain effective.
A practical setup sequence is to secure email first, then enable sign-in 2FA with a passkey or hardware security key, add funding 2FA, set up a Master Key where appropriate, and only then enable Global Settings Lock. Traders who often move collateral between spot and futures wallets should document recovery steps before turning on controls that slow account changes.
Trading takeaway: security settings are part of position sizing. Funds needed for active margin should not be mixed casually with long-term holdings, and withdrawal addresses should be reviewed before volatility spikes. A good exchange workflow assumes that phishing, SIM swaps and browser compromise are real operational risks, not just background warnings.
Risk notice: This article is educational and does not replace official exchange support. Losing access to 2FA or recovery credentials can also create account-lockout risk.
Sources: Kraken 2FA support page; Kraken funding 2FA support page; Kraken security overview.
原创文章，作者：financial transaction，如若转载，请注明出处：https://www.fanbi.net/archives/3602
