What is Kraken's Global Settings Lock (GSL)?

Kraken's Global Settings Lock (GSL) enhances account security by requiring extra verification for critical changes like email updates or disabling 2FA.

Jul 21, 2025 at 12:56 pm

Understanding Kraken's Global Settings Lock (GSL)

Kraken, one of the most reputable cryptocurrency exchanges in the world, has implemented a robust security feature known as Global Settings Lock (GSL). This feature is designed to enhance account security by restricting changes to certain critical settings unless additional verification is completed. The GSL ensures that any modification to essential account parameters requires an extra layer of authentication, which significantly reduces the risk of unauthorized access or tampering.

GSL applies to actions such as changing your email address, enabling or disabling two-factor authentication (2FA), and modifying withdrawal settings. Once activated, these changes can only be made after a waiting period or through manual verification by Kraken's support team.

How Does GSL Work?

When Global Settings Lock is enabled on a Kraken account, any attempt to modify key account settings triggers a verification process. This includes:

• Submission of a support ticket for manual verification
• A mandatory waiting period before changes are applied
• Additional identity verification steps

This mechanism prevents malicious actors from altering your account details even if they gain temporary access. For instance, if someone tries to change your email address, the GSL will not allow the change immediately. Instead, it requires further confirmation, often through customer support, which gives the legitimate user time to notice and report any suspicious activity.

Why Is GSL Important for Account Security?

In the cryptocurrency space, account security is paramount. Phishing attacks, credential theft, and social engineering attempts are common. The Global Settings Lock acts as a safety net by preventing unauthorized modifications to critical account settings. Even if a hacker manages to compromise your login credentials, they cannot easily change your 2FA settings or email address without going through Kraken’s verification process.

Moreover, the GSL protects users from accidental or impulsive changes that could lock them out of their accounts. For example, disabling 2FA might seem harmless, but doing so without realizing the implications could expose the account to potential breaches. With GSL, users are prompted to confirm such actions through additional verification steps.

How to Enable or Disable GSL on Kraken

To manage Global Settings Lock, users must navigate through their Kraken account settings. The process involves several steps:

• Log in to your Kraken account using your credentials
• Navigate to the "Security" section in your account settings
• Locate the "Global Settings Lock" option
• Select whether to enable or disable the feature
• If disabling, you may be required to submit a support ticket or wait for a specific period

It's important to note that disabling GSL might expose your account to greater risk. Therefore, users are advised to keep this feature enabled unless there's a specific need to disable it temporarily.

What Happens When You Try to Modify Locked Settings?

If a user attempts to modify a setting that is protected by GSL, the system will not apply the change immediately. Instead, the following actions may occur:

• The system displays a warning message explaining that the change is restricted
• The change is queued and will only take effect after a verification process
• In some cases, the user must contact Kraken support to confirm the change

This delay gives users and Kraken’s security team a window to detect and prevent unauthorized modifications. For example, if someone tries to change your withdrawal address or disable 2FA, the GSL will prevent immediate execution and alert you to the attempted change.

Common Scenarios Where GSL Comes Into Play

There are several situations where Global Settings Lock becomes particularly relevant:

• Email Change Attempts: Changing the primary email associated with your account is a high-risk action. With GSL enabled, this change requires additional verification.
• Disabling Two-Factor Authentication: Turning off 2FA weakens your account security. GSL ensures that this action is not taken lightly.
• Modifying Withdrawal Whitelists: Adding or removing addresses from your withdrawal whitelist is protected by GSL to prevent unauthorized fund transfers.

These scenarios highlight how GSL serves as a proactive defense mechanism against potential account compromises.

FAQs

Q: Can I bypass GSL if I urgently need to change my email address?

A: No, GSL cannot be bypassed. However, you can submit a support ticket to Kraken’s team, who may assist in verifying your identity and expediting the process.

Q: Does GSL apply to all Kraken account types?

A: Yes, GSL is available to all users regardless of account tier. However, higher-tier accounts may have different verification processes when modifying locked settings.

Q: How long does the GSL verification process take?

A: The time required varies depending on the action. Some changes may take up to 48 hours, while others may require manual review by Kraken’s support team, which can extend the process.

Q: Is GSL automatically enabled on all accounts?

A: No, GSL is not enabled by default. Users must manually activate it in their security settings to benefit from its protections.