Connecting your Kraken exchange account to a portfolio management app like Good Crypto streamlines trading, enhances security, and provides deep historical insights into your crypto activity. This guide walks you through the complete process of generating a secure Kraken API key and integrating it seamlessly with Good Crypto—step by step.
Whether you're managing multiple exchanges or simply want advanced tools like stop-loss and take-profit orders across platforms, API integration is essential. Below, we break down everything from permissions to security best practices.
Step 1: Access Your Kraken Account Security Settings
Begin by logging into your Kraken account. Once inside, navigate to your profile settings:
- Click on your username in the top-right corner.
- Select Security from the dropdown menu.
- Then go to the API tab.
This section allows you to manage all API keys linked to your Kraken account. It's crucial to keep this area secure and monitor any active keys regularly.
👉 Discover how secure crypto tools can simplify multi-exchange trading
Step 2: Request a New Kraken API Key
On the API page, click the Add key button. This triggers the key generation process. Kraken will prompt you to configure permissions for the new key—this is where security matters most.
Take your time here. The permissions you assign determine what actions the connected app (in this case, Good Crypto) can perform on your behalf.
Step 3: Configure API Key Permissions Safely
By default, Kraken does not grant any permissions. You must manually enable the ones required for Good Crypto to function properly.
Check the following boxes:
- Query Funds – Syncs your current wallet balances.
- Query Open Orders & Trade – Allows tracking open trades.
- Query Closed Orders & Trades – Imports past trade history.
- Modify Orders – Enables editing active orders via Good Crypto.
- Cancel/Close Orders – Lets you cancel trades remotely.
- Query Ledger Entries – Retrieves full transaction history (deposits, withdrawals, etc.).
Additionally, set the Nonce window to 5000 or higher. This ensures smooth communication between Good Crypto and Kraken by preventing synchronization issues due to timing delays.
⚠️ Never check the "Withdrawal" permission. Good Crypto does not require withdrawal access, and enabling it increases risk unnecessarily.
Once configured, click Generate Key.
Step 4: Securely Copy Your API Keys
After generation, Kraken displays two critical pieces of information:
- API Key (Public Key)
- Private Key (Secret Key)
These must be copied carefully. The private key will only appear once—if you close or refresh the page, it cannot be retrieved again.
You can also choose to display a QR code containing both keys. This is especially useful for mobile setup.
🔐 Critical Security Tip: Do not save these keys in plain text files, emails, or unencrypted notes. Avoid storing them on your computer altogether.
👉 Learn how top traders protect their digital assets across platforms
Step 5: Add the API Key to Good Crypto
Good Crypto supports two secure methods for importing your Kraken API key.
Option 1: QR Code + Mobile App (Recommended)
This is the safest and fastest method.
- On Kraken, display the QR code.
- Open the Good Crypto app on your phone.
- Go to Settings → Exchanges → Kraken → Scan QR Code.
- Grant camera access and scan the code.
The app automatically reads and encrypts your credentials.
Next, name your account clearly—e.g., “Kraken Main” or “Kraken EUR”. Keep it short but identifiable, as space is limited on mobile screens.
Tap Save and Validate. If successful, a green checkmark confirms everything is working.
💡 Pro Tip: Good Crypto shows partial public key digits in the app interface. Use these to verify which key belongs to which exchange if managing multiple accounts.
If validation fails:
- Double-check permissions on Kraken.
- Ensure no typos occurred during manual entry (if used).
- Confirm internet connectivity.
Still stuck? Contact support at [email protected].
Option 2: Manual Entry via Web App
If scanning isn’t possible:
- Visit the Good Crypto web app.
- Navigate to Settings → Exchanges → Kraken → Enter API Keys Manually.
- Paste your public API key and private secret key.
- Save and validate.
All data syncs instantly across devices.
⚠️ Reminder: Never transmit API keys via email, messaging apps, or unsecured channels.
Step 6: Enable 2FA for Maximum Security
After adding your key, boost protection by enabling Two-Factor Authentication (2FA) on your Good Crypto account.
While not mandatory, 2FA drastically reduces the risk of unauthorized access—even if someone obtains your login details.
The app may display persistent reminders until 2FA is activated. This is intentional: security comes first.
Once enabled, you’ll enjoy peace of mind knowing your portfolio data and trading capabilities are well protected.
What Happens After Integration?
Once connected, Good Crypto begins syncing:
- Trade history (open and closed orders)
- Deposit and withdrawal records
- Real-time balance updates
Unlike many apps that only track activity after setup, Good Crypto pulls historical data as far back as Kraken’s API allows—sometimes up to two years or more.
Imagine seeing exactly how your portfolio evolved since your first trade on Kraken. That’s powerful insight for evaluating performance and refining strategy.
Understanding API Keys: A Quick Guide
An API (Application Programming Interface) allows different software systems to communicate. Think of it as a secure bridge between Kraken and Good Crypto.
When you generate an API key, you create a pair:
- Public Key (API Key): Identifies your account—safe to share within secure systems.
- Private Key (Secret): Authenticates requests using cryptographic signatures—must never be exposed.
This system uses asymmetric encryption, similar to blockchain wallets, ensuring that only authorized actions are executed.
Security Best Practices You Should Follow
While Good Crypto employs end-to-end encryption and stores keys in isolated, firewalled databases, user behavior plays a major role in overall security.
Here’s how to stay safe:
- 🔒 Never enable withdrawal permissions on third-party apps.
- 📲 Always use QR code scanning when possible—minimizes exposure.
- 🧩 Store keys only in encrypted environments.
- 🔄 Regularly review active API keys on Kraken and revoke unused ones.
- 🛡️ Use unique passwords and 2FA everywhere.
Your keys are only as strong as the weakest link—and often, that’s human error.
Frequently Asked Questions (FAQ)
Q: Why shouldn’t I enable withdrawal permissions for Good Crypto?
A: Good Crypto doesn’t need withdrawal access to function. Disabling this permission protects your funds even if your API key is compromised.
Q: Can I reuse my old Kraken API key?
A: Yes—if it has the correct permissions and hasn’t been revoked. However, generating a fresh key ensures optimal security and compatibility.
Q: Is my API secret stored safely in Good Crypto?
A: Yes. The app encrypts your secret locally before sending it over secure channels. It remains encrypted on servers and is never exposed to staff or third parties.
Q: How far back does trade history sync?
A: Kraken’s API typically allows access to up to two years of historical data. Exact depth depends on exchange limits.
Q: What if I lose my private key?
A: If you close the Kraken key creation page without saving the secret, it’s permanently lost. You’ll need to generate a new key pair.
Q: Does connecting via API slow down trading?
A: No. API connections enable real-time order execution—often faster than manual trading through a browser.
👉 See how professional traders leverage secure APIs for smarter investing