Skip to main content

How to Secure Kraken with a Passkey

Sign In to Kraken Without a Password

Mobile and Web

From your Kraken account's Security page, add a passkey, insert your Seedkeeper PRO as a hardware security key, and confirm - you can register up to 5 passkeys per account.

Overview​

Kraken supports passkeys for sign-in 2FA, including hardware security keys like your Seedkeeper PRO. Kraken calls this a Roaming 2FA method - one that works across any device compatible with the key itself, unlike a Device-Bound passkey tied to a single browser. It is also the only 2FA type here that resists phishing, since an authenticator code can be relayed in real time - see Passkey vs OTP.

Your first 2FA method must be Roaming

Kraken requires your very first sign-in 2FA method to be a Roaming type. A hardware security key like your Seedkeeper PRO qualifies, so this works well as a first method - or as an additional one alongside an authenticator app.

Why choose the security key option?

The default your browser offers - Face ID, Touch ID, Windows Hello, or a synced credential manager - creates a perfectly valid passkey.

Choosing your Seedkeeper PRO instead changes three things:

  • The key exists in one place only. A synced passkey is copied across every device on your cloud account, and that account is usually protected by a password. A hardware passkey is generated inside a certified secure element and physically cannot leave it.
  • Nobody else is in the chain. No provider account, no cloud, no vendor login standing between you and your own credentials.
  • It travels. The same card or ring works on your phone, your laptop, and a machine that isn't yours - a work computer, a shared workstation - leaving nothing behind.

See "Not All Passkeys Are Stored the Same Way" for the full comparison.

Step-by-Step Instructions​

Step 1: Sign in to your Kraken account​

Step 2: Go to Security​

Click your profile icon in the bottom-left corner, then click Security.

Step 3: Add a passkey​

Click Add a Passkey. A pop-up appears: "Create a passkey for kraken.com."

Step 4: Connect your Seedkeeper PRO​

Insert your Seedkeeper PRO, or tap it against an NFC reader, then click Allow.

Step 5: Enter your PIN​

Provide your passkey PIN to complete the registration.

Kraken confirms the passkey has been added to your account.

Managing Your Passkeys​

  • Rename: click Edit next to the passkey, enter a new description (up to 256 characters), then click Update Method.
  • Remove: click Delete next to the passkey. Kraken always requires at least one Roaming 2FA method enabled - if this is your only one, add another first.
  • You can register up to 5 passkeys per account, so there's room for a Main device and a couple of backups - see Passkey Backup Strategy for a recommended setup.

Official Kraken Resources​

FAQ​

Can I use my Seedkeeper PRO as my only 2FA method?

Yes - a hardware security key counts as a Roaming 2FA, which satisfies Kraken's requirement for your first sign-in 2FA method.

Does adding a passkey remove my Kraken password?

No. Your password remains part of sign-in; the passkey satisfies the 2FA step.

Can I add more than one Seedkeeper PRO as a backup?

Yes, up to 5 passkeys per account - see Passkey Backup Strategy for a recommended setup.

What other financial services support passkeys with my Seedkeeper PRO?

See PayPal and Binance.

Why register a Seedkeeper PRO instead of my phone's built-in passkey?

Both defeat phishing, so the honest answer is that it depends what the account is worth. A synced passkey is copied to every device on your cloud account, and that account is the new target. A Seedkeeper PRO passkey exists on one certified chip that cannot export it, with no provider in the chain - which matters when the account guards your holdings and withdrawals. See Not All Passkeys Are Stored the Same Way.