Humble Bundle Redesign Removes Two-Factor Authentication Management from Settings
A recent redesign of the Humble Bundle storefront has reportedly removed the ability for users to add or update two-factor authentication (2FA) methods within their account settings. While some forms of security remain, such as email-based access codes during login, users have noted that previously configured rotating 2FA codes are no longer being prompted and management options have vanished from the interface. Additional security concerns were raised when it was discovered that users can update passwords without being required to enter their current password. The owners of Humble Bundle, IGN Entertainment and its parent company Ziff Davis, have not yet provided a comment regarding these changes or the potential impact on user account security.
Tickers: $ZD
Topics: Humble Bundle Security vulnerability Two-factor authentication Website redesign