All
Why is my account restricted?
Where is my cash deposit?
Why can't I withdraw?
Where is my Krak card?
Where is my crypto deposit?
How to enable multiple two-factor authentication
Last updated: 24 ліпеня 2026 г.
The first sign-in two-factor authentication (2FA) method to be enabled on a Krak account, must be a Roaming 2FA.
You can only have a single Device-Bound (non-roaming) Passkey enabled if Roaming 2FA is also enabled. This is to ensure you are not limited to the one device that the Passkey was created on, avoiding future account access issues.
To enable multiple 2FA:
- 1
Click on your profile icon in the top left corner of the page and select Security.
The available options are:
Passkeys :
- •
Tap Passkeys and then Add passkey
Choose either:
Cross-Device phone/tablet:
a) Enable Bluetooth on both devices
b) Scan the QR code using the phone or tablet’s camera (not an app)
c) From your mobile device, follow the onscreen instructions (remembering to click Save).
Hardware Security Key:
- •
Insert your Security Key into your device and touch it.
- •
Follow the onscreen instructions to confirm the update.
Authenticator App:
- •
Click Enable.
- •
Scan the QR code or enter the set-up key into your chosen Authenticator App.
- •
Follow the onscreen instructions and click Continue.
Note: If you previously enabled a legacy 2FA method such as a YubiKey or a Static Password, these methods are considered Roaming 2FAs but are no longer recommended by Kraken. It is strongly advised you update any legacy 2FA methods to a more secure option.
See also Risks of using an Authenticator App.
Once the initial sign-in 2FA is setup you can enable:
- •
Up to one Authenticator App
- •
Up to five Passkeys
- 1
Sign in to your account.
- 2
In the top left corner tap on your profile icon. Then tap Security.
- 3
Click Add a Passkey.
- 4
Insert and touch the Hardware Security Key. Click Allow.
- 1
Sign in to your account.
- 2
In the top left corner tap on your profile icon. Then tap Security.
- 3
Click Add a Passkey.
- 4
Click Continue.
- 5
Note: The Device-Bound feature may not be available on certain browsers, e.g. Safari Browser. Instructions can vary across devices or browsers.
When sign-in 2FA, Master Key and/or Passkeys are created, a default description will be automatically assigned. You will be able to edit the description to something more personal and memorable.
To edit the description:
- 1
Click Edit next to the 2FA method.
- 2
Enter a new description in the field and click Update Method.
The maximum description length is 256 characters.
It is currently not possible to edit descriptions for Funding and Trading 2FA, nor with legacy sign-in 2FA methods.
To delete a 2FA method, click on the Delete button next to the 2FA method. If you need to change a Passkey you will need to delete the one you wish to change and then enable the new Passkey.
Note: There must always be at least one Roaming 2FA method enabled.
What if I want to change my only 2FA method?
If you only have one sign-in 2FA or Passkey method enabled, to update or change it you must first enable another Cross-Device Passkey before deleting, updating or changing the original method.
For example, if you have an Authenticator App enabled as your sign-in 2FA and wish to update it:
- 1
Create a Cross-Device Passkey.
- 2
Delete the authenticator app sign-in 2FA.
- 3
Re-enable a new authenticator app.
- 4
You may then delete the Cross-Device Passkey, if you wish.