Humble Bundle redesign removes two-factor authentication

Humble Bundle's newly redesigned website has removed support for two-factor authentication, leaving accounts more vulnerable. Users who previously enabled 2FA on the old site can now log in with only an email and password, with no prompt for a security code at any point during the process. The change is not mentioned anywhere on the new site, and the FAQ section still contains articles advising users to enable 2FA for account security. Some users on the Humble Bundle subreddit expressed concern, noting that saved payment details may no longer be removable and that password changes could be risky without the extra layer of protection. The author reached out to Humble Bundle to ask whether the removal was intentional and if it will be reversed, but has not yet received a response. In the meantime, users who have payment information saved to their accounts may want to consider removing it, though some report difficulty doing so.