Humble Bundle's new redesign inexplicably removes 2-factor authentication, dramatically weakening account security
I recommend removing your saved payment details, at least for now.
Humble Bundle, the online retailer for video games, books, and software, has recently undergone a redesign that has sparked alarm among users. The new website layout appears to have eliminated a crucial security feature: two-factor authentication (2FA). Users are now unable to enable 2FA on their accounts, and existing users with the feature enabled are still able to log in using only an email and password.
The login process does not prompt users to enter a 2FA code, raising concerns about the website's security. Humble Bundle's Frequently Asked Questions (FAQs) still recommend using 2FA for account security, but the option is no longer available. The company has not addressed the removal of 2FA on their site, and users have reached out to inquire if the change was intentional and if it will be reversed.
This situation is troubling, as 2FA is designed to add an extra layer of protection to user accounts, especially those containing sensitive information like credit card details.
Many Humble Bundle users are expressing their discontent on the company's subreddit and other online platforms. They are frustrated with the lack of communication regarding the change and the potential consequences of losing this vital security feature. Some users have also reported issues removing saved payment details from their accounts. While some speculate that this change may not have been intentional, the absence of 2FA remains a significant concern until it is resolved.
Written by urgent.news from PC Gamer's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.