Humble Bundle Redesign Removes Two-Factor Authentication Management from Settings

The popular digital storefront Humble Bundle recently underwent a significant website redesign, aiming to modernize its user interface. However, the update has sparked concerns among security-conscious users after it was discovered that the ability to manage two-factor authentication (2FA) settings has been removed from the user dashboard.

According to reports from Kotaku, users attempting to access their account security settings to add, update, or remove 2FA methods are finding that these options are no longer available in the new layout. This change is particularly troubling for those who rely on 2FA to protect their game libraries and personal information from unauthorized access. While the company has not yet provided a detailed explanation for the removal, the lack of visibility into these security features has left many customers feeling vulnerable.

Further investigation by PC Gamer highlights a disconnect between the current site functionality and the company’s existing support documentation. Humble Bundle still hosts several help articles that explicitly instruct users on how to manage their 2FA settings, suggesting that these features were intended to remain accessible. The discrepancy between the support pages and the actual user interface has led to confusion, as users are being directed to settings menus that no longer exist or have been stripped of their primary functions.

Security experts generally emphasize the importance of 2FA as a critical layer of defense against account takeovers. By making it difficult for users to manage these settings, Humble Bundle may inadvertently be discouraging the use of robust security practices. Until the company restores these features or provides a clear alternative for managing authentication methods, users are advised to remain vigilant regarding their account security. It remains to be seen whether this was an intentional design choice or an oversight that will be rectified in a future site update.

Sources: The Verge