Humble Bundle redesign removes two-factor verification from settings

Coverage from The Verge, PC Gamer, Kotaku, GamingOnLinux, Retro Handhelds, and Game News Plus reports that Humble Bundle's recent website redesign has eliminated the two-factor authentication option from user account settings. The Verge's headline states the redesign removes two-factor verification from settings, while PC Gamer describes the change as inexplicable and says it dramatically weakens account security. Kotaku characterizes the redesign as having a vibecoded appearance and notes the company forgot to implement full account security. GamingOnLinux uses the term messy vibe-coding in its coverage, and Retro Handhelds calls the redesign a fumble with serious security issues. Game News Plus reports the redesign reportedly removes 2FA and raises security concerns.

The coverage emphasizes the security implications of removing two-factor authentication, a standard account protection measure that requires users to provide a second verification factor beyond a password. PC Gamer specifically frames the removal as dramatically weakening account security, while The Verge presents the fact of the removal in its headline. Kotaku and GamingOnLinux both reference the term vibe-coding, suggesting the redesign may have been implemented with insufficient attention to security fundamentals. Retro Handhelds describes the situation as a fumble, and Game News Plus characterizes it as raising security concerns. The simultaneous publication across six outlets spanning mainstream tech journalism (The Verge), PC gaming media (PC Gamer, Kotaku), Linux gaming coverage (GamingOnLinux), handheld gaming focus (Retro Handhelds), and general gaming news (Game News Plus) indicates broad industry attention to the issue.

The removal of this protection during a redesign represents a regression in account security posture. The coverage does not specify whether Humble Bundle has issued any statement regarding the removal, whether the feature is planned for reimplementation, or whether the change affects all users globally. The term vibe-coding used by Kotaku and GamingOnLinux suggests criticism of development practices that prioritize aesthetic changes over functional security.

Based on the coverage, key developments to watch include any official response from Humble Bundle regarding the 2FA removal, whether the company provides a timeline for restoring the security feature, and whether users report account compromises attributable to the missing protection. The coverage does not indicate whether alternative security measures such as email verification codes or authenticator app support remain available. Monitoring statements from Humble Bundle's support channels, social media, or blog would clarify the company's position. The simultaneous coverage across six outlets suggests continued media scrutiny until the issue is addressed.