Humble Bundle redesign drops two-factor verification setup from account settings
After the game and software store Humble Bundle refreshed its website, the settings page no longer lets users add or update two-factor verification methods. Some form of account protection nonetheless still appears to work.
Humble Bundle, a storefront for games and other software, recently launched a new look for its website, but the account settings page no longer offers a way to add or update two-factor verification methods. Two-factor verification is an extra security layer that requires a second proof of identity in addition to a password. The change was first reported by Kotaku, and The Verge reporter Jay Peters adds that PC Gamer also noticed it.
PC Gamer noted that Humble Bundle support pages still discuss two-factor verification, and its writer said they had set it up on the previous version of the site.
What protection still works
According to the Verge reporter's own test, some form of verification does seem to exist, at least for now. When he tried to log into his Humble Bundle account, he was prompted to check his email for an access code before he could get in.
Once logged in, he was able to change his password without entering the old one. His password manager app also shows that a rotating two-factor code was set up for Humble Bundle at some point, yet he was not asked to enter it during this login.
Company response
Humble Bundle is owned by IGN Entertainment, whose parent company is Ziff Davis. Neither company immediately replied to The Verge's request for comment.
