Before linking a bank account, secure both your Kraken sign-in and the email address used to recover it. Add sign-in 2FA, set up a Master Key before enabling Global Settings Lock, and check the deposit method’s eligibility and withdrawal hold. Kraken’s bank-linking steps vary by location; the Plaid instructions below apply specifically to eligible US ACH users.
Secure the Kraken sign-in and recovery email
Start with a long password used only for Kraken. Kraken recommends at least 15 characters, though its stated minimum is 12, and suggests using a password manager to generate and store it. Protect the email account associated with Kraken too: access to that inbox may let an attacker target account recovery. Kraken advises avoiding a phone number for sign-in or 2FA where possible because of SIM-swap risk. If you rely on a mobile number, ask your carrier about an account PIN, number lock, or port-out protection. Kraken Support’s account-security guidance was last updated 30 September 2026.
As an Amazon Associate I earn from qualifying purchases.
Turn on sign-in 2FA
Kraken recommends sign-in 2FA using a passkey where your device supports it. A passkey is a device-managed credential associated with the site or app; it is not the same thing as a biometric. Your device may use a fingerprint or face scan to unlock the credential, but the passkey itself is handled by the device. Kraken describes passkeys as phishing-resistant. Add a second passkey if available so you have another way to sign in if your primary device is lost. You can also choose a FIDO2-compatible hardware security key as an optional separate device; it is not required if a suitable device passkey meets your needs. Read Kraken’s explanation of passkeys and its 2FA setup guidance.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Set up recovery protection before locking settings
Configure a Master Key before enabling Global Settings Lock (GSL). Kraken says GSL prevents adding or changing a Master Key while the lock is active. A Master Key helps protect against unwanted password resets and can serve as a backup for sign-in 2FA; where possible, keep it on a different device from your sign-in passkey.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Once the Master Key is in place, enable GSL to block changes to account settings and withdrawal addresses. Kraken’s guidance describes a delay of 1 to 30 days to remove the lock, with three days as the default. Choose a delay you can live with: GSL adds friction if you later need to make a legitimate settings change. See Kraken’s account-security guidance for its current configuration details.
Know what each 2FA setting protects
Kraken provides separate 2FA functions for sign-in, funding, trading, and the Master Key. Turning on sign-in 2FA does not automatically secure every other action. Funding 2FA can add protection to deposits and withdrawals, but Kraken says it does not stop someone from adding a new cryptocurrency withdrawal address; GSL addresses that setting-change risk.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Kraken also cautions that Funding 2FA needs appropriate additional protection—GSL or sign-in 2FA—to prevent someone with account access from changing or removing it. Review the scope of each setting in Kraken’s Funding 2FA article rather than assuming one 2FA option covers the whole account.
Check eligibility before linking a US bank through Plaid
Kraken’s documented ACH-via-Plaid flow is specific to the United States. Its instructions require a verified Kraken account located in the US, excluding Texas, a supported US bank, and matching names on the bank and Kraken accounts. Use an account you control; Kraken’s withdrawal guidance likewise calls for a bank account in the verified account holder’s name. These conditions are not universal Kraken bank-linking rules: availability depends on location, bank, account verification, and funding method. If you are outside this US ACH case, use the funding options shown in your Kraken account.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Web instructions
- Open Deposit and select US Dollar.
- Choose Linked bank transfer, then click Add new account.
- Select your financial institution and complete Plaid’s prompts.
- Review the deposit terms and confirmation details before submitting.
App instructions
- Choose Deposit, then USD.
- Select Linked bank transfer, then Link account with Plaid.
- Follow Plaid’s prompts and review the deposit terms before confirming.
For the exact eligibility requirements and flow, see Kraken’s ACH via Plaid instructions. Bank details added for withdrawals are a separate process; consult Kraken’s withdrawal instructions if you are setting up a payout rather than linking a bank for a deposit.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Understand the ACH hold before depositing
Kraken says ACH deposits through Plaid can take up to five minutes to process. Once credited, the deposited value is available for trading but cannot be withdrawn for seven days. Kraken’s cash deposit options, updated 1 October 2026, also list a seven-day hold for ACH Plaid and a 72-hour hold for certain other transaction types. Holds and processing times differ by funding method; do not assume the ACH terms apply to every bank transfer or region. Check the confirmation screen and Kraken’s current cash deposit options before submitting.
Quick Recap
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
