A bug was recently discovered with Cloudflare, which Kraken and many other websites use for DoS protection and other services. Due to the nature of the bug, we recommend as a precaution that Kraken clients change their security credentials: Change your password Change your…
Heed this or perish. Let’s begin with the assumption that within 24 hours your usual mobile phone number will be hijacked by social engineers. They will use your number to gain access to every account you own that utilizes phone-based authentication and account recovery, like…
We have received many reports lately of clients falling victim to phishing sites appearing in the ads, above the organic search results, of all of the major search engines. Unfortunately, it seems to be easier to get an ad up than it is to have…
We have been alerted to multiple phishing attempts in the past 24 hours which appear to have been targeted at BitcoinTalk users. Anyone who received an email with the subject Mtgox.Claim assessment process should delete it and not click on the link it contains! This email…
Kraken is proud to announce a new partnership with BitGo, a leading provider of digital asset security. BitGo now integrates its multi-sig vault wallet system and robust security management controls with Kraken. Kraken had previously employed a custom off-chain, multi-party signing system with off-site components –…
2014 is considered by some to be the year of multi-sig, and we are happy to announce that Kraken supports payments to multi-signature Bitcoin addresses (addresses beginning with a ‘3’). Multi-sig features are built right into Bitcoin at the protocol level, offering a powerful free…
The first thing to understand about two-factor authentication is that you need it. For email or financial accounts, where security is of the utmost importance, two-factor authentication is essential because it greatly reduces the chance that the account will be compromised. The second thing to…
The recently discovered “Heartbleed” OpenSSL vulnerability may have affected many HTTPS sites on the internet, including kraken.com. When exploited, this vulnerability can leak random information that may contain usernames, passwords, and API keys. Most of our servers were patched before the vulnerability was publicly announced,…