It'll be a long mile troubleshooting and figures where the error may be since you can't remember what brand of authenticator app in the use that stroke all the inconveniences because, you might have probably stepped into one of the malicious scammers software.
Are you saying the Kraken has already sent you a mail at the period of this incident? Did you laid complain or you're referring to when you newly opened the account? because if your complains prompted this,  then you'd had still been eligible to send other mails. That's if the mail site concerned here's legit because I fear that you don't mistake the original sites with the url spoofing.
However, I'll advice you visit their official site at https://www.kraken.com. there you can also get link to their Help Service. Then you take up from there.

Write their support to deactivate 2fa in your account and after verifying that you are the real owner of the account, they will deactivate 2fa on that account so you can login with email and password thereafter you set new 2fa. I have had this type of issue before but in another exchange and it was resolved the way I suggested.

Maybe you should contact the support to help you out because you said you used two phones and two laptops to access it and to the best of my knowledge of their system detects strange IP, they block access and here you said you can not access it because of 2fa and I think this is a enough reasons why you are facing or having a hard time to login coupled with the fact that your 2fa is not accessible or active as you have said.
At this point, only the support could help you or if you can wait for some days so you could access it again and see since you did that with two different systems today. You could also read the article as provided by  OmegaStarScream for a clearer understanding on how to go about the 2fa unlocking and transfer to another phone.

My advise for you when things happens in this manner is to first find a wa7y of contacting the support team for the necessary assistance needed, they know the best way to handle issues like this and help you out, id thought earlier that the issue was from your end as you're unable to have access to the 2FA set you made earlier as the recovery means, but since this wasn't an issue, their team are in the best situation of helping in this regard.

See here, they have an article about this: https://support.kraken.com/articles/360026925951-how-to-transfer-authenticator-app-sign-in-2fa-to-a-new-phone-and-bypass-sign-in-2fa-for-a-lost-phone-

I'm guessing you didn't setup a master key, nor did you keep the recovery key for the 2FA so right now, your best bet would be to contact the support.

I got hacked on Feb 12

The wallets i created using BitAddress.org were not hacked

But the ones from https://segwitadress.org/ were

Both had passwords

Not sure , if the hacker left BitAddress alone because they contain 0.01 Btc only

But my ETH paper wallets were also hacked as well as a multi sig wallet I created with Electrum

I don’t trust paper wallets now

I like paper wallets because of how easy it is to add heavy encryption (BIP38). I'm still working on a project to use that on seed words (BIP39).

If you want to be able to write things down without making a mistake then it is very difficult to do with with a WIF private key that is a long random alphanumerical characters. It is a lot easier to write down words, which you can do if you use a deterministic wallet like Electrum that generates a mnemonic (12 words) that are easier to write down. That way you have the benefit of also being able to generate more than one address from those words which comes in handy in the future when you want to spend your coins (avoids address reuse).

It depends. It'll only stop virus which works by sending private key or other data to certain server using internet. You're still vulnerable to clipboard virus, which replace Bitcoin address when you perform copy and paste.

IMO it's safe enough. BTW, you can run Linux application on Chromebook. So you could Electrum AppImage file and then run it on your ChromeBook, assuming your chromebook doesn't use ARM chip.


From quick google search, Silk browser is based on Chromium, where Google Chrome is also based on Chromium. So theoretically there shouldn't be any problem.

That "IE8" was from 2011 to 2009, as long as your Silk Browser is updated with a newer Javascript support, it'll work (and it did).
For the record, if the browser or device isn't supported by bitaddress like Window7's Internet Explorer 8, the tool will not be able to create a paper wallet entirely.

Amazon Fire was a bit of a waste though since you can't now use it online.
You could've dedicated an offline machine without an internal drive, then use an "amnesiac" OS that's installed on a flash drive like 'TailsOS' to launch bitaddress offline.
You can destroy that Flash Drive later if you want since it's cheap, although everything you did while it was active was on your RAM (will not linger after a few seconds once depowered)

Yeah, that was only for additional entropy for "seedTime" and the majority of the entropy is still generated with its SecureRandom function.

Probably you read an old case/accusation? I haven't read any accusation against paper wallet anymore.

They have an ANN thread in this forum, there's no complain on the thread [ANN] bitaddress.org Safe JavaScript Bitcoin address/private key

Here's the tips if you want to run safely bitaddress on an air gapped device https://security.stackexchange.com/questions/274683/safe-usage-of-bitaddress-org