
Humble Bundle's new redesign inexplicably removes 2-factor authentication, dramatically weakening account security
I recommend removing your saved payment details, at least for now.
via PC GamerReported by 2 outlets
The story so far
AI summary of the reporting below · Updated · How we work
Humble Bundle recently rolled out a redesigned website for its digital game and software storefront, but the update stripped out user controls for two-factor authentication. Account settings on the new site no longer offer any option to add or configure verification methods, leaving existing support pages that recommend the feature out of step with what users can actually do. [1][2]
The change has caused confusion over how logins are handled. PC Gamer observed that accounts with previously configured two-factor authentication could log in using only an email and password without being prompted for a code. However, a reporter for The Verge noted that attempting to log in triggered a prompt to check email for verification, suggesting some automated checks may remain active even as account management options vanished. [1][2]
Customers have reacted with frustration over potential security risks, particularly because saved credit card details may be stored on their profiles. Several users voiced alarm in community discussions, with some reporting that they could no longer find a way to delete saved payment methods from the updated interface. [2]

I recommend removing your saved payment details, at least for now.
via PC Gamer
The Humble Bundle storefront for buying games and other software recently got a new look, but on the settings page, it no longer offers a way to add or update two-factor verification methods, as reported by Kotaku. PC Gamer also points out that there are Humble Bundle support pages discussing two-factor verification, and the writer…
via The Verge