How to check login activity on Kraken? (Security logs)

Accessing Your Kraken Security Logs

1. Log in to your Kraken account using your registered credentials and two-factor authentication method.

2. Navigate to the top-right corner of the dashboard and click on your account name.
3. Select Security Settings from the dropdown menu.
4. Scroll down to the section labeled Login Activity or Recent Login History.
5. Click the View Details button to load the full chronological list of sessions.

Understanding Login Activity Timestamps and Metadata

1. Each entry displays a precise timestamp in your local time zone, including date, hour, minute, and second.

2. The IP address associated with the login attempt is shown alongside geolocation data such as city, region, and country.
3. Device information includes browser type, operating system, and whether the session originated from a mobile or desktop client.
4. A status indicator marks each event as Successful, Failed, or Blocked due to security policies.
5. Sessions initiated via API keys are tagged separately and include the label API Authentication instead of user interface access.

Filtering and Exporting Login Records

1. Use the date range selector to narrow results to specific days, weeks, or months.

2. Apply filters for location, device type, or authentication method to isolate relevant patterns.
3. Click Export CSV to download raw log data for offline analysis or compliance reporting.
4. Exported files contain all visible fields plus additional technical identifiers like session ID and user agent hash.
5. Kraken retains login history for up to 90 days; older entries are automatically purged without manual intervention.

Recognizing Suspicious Login Patterns

1. Multiple failed attempts followed by a successful login from an unfamiliar geography indicate credential compromise.

2. Concurrent sessions from distant locations—such as Tokyo and Buenos Aires within minutes—suggest unauthorized access.
3. Logins occurring outside your typical activity window, especially during overnight hours in your timezone, warrant immediate review.
4. Entries showing “Unknown Device” or “Unknown Browser” with no prior association to your account profile raise red flags.
5. Any record listing a Tor exit node IP or data center address not tied to known VPN services should be treated as high-risk.

Responding to Unauthorized Access

1. Immediately revoke all active API keys through the API Management page.

2. Reset your primary password using the Change Password option under Security Settings.
3. Re-enroll in two-factor authentication if the recovery method was potentially exposed.
4. Submit a support ticket referencing exact timestamps and IP addresses of suspicious events.
5. Disable email-based password resets temporarily while verifying linked contact details remain uncompromised.

Frequently Asked Questions

Q: Can I see login attempts made before I enabled two-factor authentication?A: Yes. Kraken logs all authentication events regardless of 2FA status at the time of login.

Q: Does Kraken notify me when someone logs in from a new device?A: Yes. Email alerts are sent automatically unless disabled in Notification Preferences under Account Settings.

Q: Are API key logins included in the same activity feed as web interface logins?A: No. API logins appear in a separate tab labeled API Access Logs within the Security Settings panel.

Q: Why do some login entries show “Location Unknown” even with a valid IP address?A: This occurs when geolocation databases lack updated mapping for that IP block, often seen with enterprise networks or newly allocated IPv6 ranges.