Skip to content

Kraken API Key

Service Name: Kraken

Service Description: Kraken is a cryptocurrency exchange platform that allows users to trade various cryptocurrencies including Bitcoin, Ethereum, and others. The platform provides trading services, portfolio management, and crypto staking.

Service Address: https://www.kraken.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured in the Kraken security settings for API keys.

Secret Access Scope: Grants programmatic access to Kraken exchange services, including account information, trading capabilities, and fund management depending on the permissions assigned to the API key.

Secret Revokement URL: https://www.kraken.com/u/security/api

Secret Example: K6xd4BQzOoRGQnD5340vZl9CwfYV2WsR1ErqtQhn7rDDI8+q/ZBHDvey

Suspicious Activity Investigation Instructions:

  • Review the API key permissions and recent activity in your Kraken account.
  • Check for unauthorized trades or withdrawals in your account history.
  • Monitor for unusual login attempts or API calls from unfamiliar IP addresses.
  • Examine account settings for any unauthorized changes to security preferences.
  • Review email notifications from Kraken for any security alerts or warnings.

Mitigation Instructions:

  • Log in to your Kraken account at https://www.kraken.com/.

  • Navigate to the Security section and then to the API tab.

  • Locate the compromised API key in the list.

  • Click on "Revoke" next to the API key to immediately invalidate it.
  • Create a new API key with appropriate permissions if needed.
  • Consider enabling additional security features like Global Settings Lock.
  • Review and update your account's two-factor authentication settings.
  • Change your account password if you suspect broader account compromise.