Humble Bundle has updated its online storefront interface but removed the option for users to manage two-factor authentication (2FA) methods on the settings page. While some form of 2FA via email codes remains during login, the removal of configurable 2FA is concerning to users and security observers.
- Two-factor authentication settings removed in new Humble Bundle redesign
- Login still prompts email access code but omits app-based 2FA challenges
- Password changes do not ask for the old password, raising security concerns
What happened
Humble Bundle's recent redesign of its storefront removed the option for users to add or update two-factor authentication (2FA) methods within the account settings. Previously, users could set up app-based rotating codes for enhanced security. However, this functionality is no longer accessible in the new interface.
Despite the removal of 2FA management from settings, some level of two-factor authentication persists via email-based access codes that users must enter during login. Still, users with previously configured app-based 2FA codes are not prompted to input those codes, and the site allows password changes without requiring the old password.
Why it matters
Two-factor authentication is a critical element of account security that helps protect user data and purchases from unauthorized access. The removal of the ability to manage 2FA directly impacts users' control over their account security, potentially exposing them to higher risk in case of compromised passwords.
Moreover, the absence of app-based 2FA prompts and the lack of old password verification for password changes reduce the overall security posture of Humble Bundle accounts. These changes have sparked concern among users and security experts about the platform's commitment to safeguarding user accounts.
What to watch next
It will be important to monitor if Humble Bundle or its parent company, Ziff Davis, respond to these security concerns and clarify their approach to two-factor authentication and account protection. Users will be looking for reassurance that their accounts remain secure despite the interface changes.
Additionally, any future updates restoring full 2FA management or introducing enhanced security measures will be closely watched. The evolving security controls on major digital storefronts like Humble Bundle reflect broader industry trends in user account protection.