Gaming News
Humble Bundle Redesign Removes 2FA and Password Checks
Developing
Photo: kotaku.com (from the cited article) All clips and posts below are embedded from their original sources.
Background
Humble Bundle is a PC storefront known for charity game bundles. The platform allows users to purchase and redeem game codes, with accounts storing library history and payment details.
The recent update, described by users as a 'vibe-coded' redesign, altered the site's interface and security architecture. The changes were initially noticed by users on Reddit, who reported that standard security features were missing from their accounts.
The timeline
-
Kotaku reported security features removed in Humble Bundle redesign
Kotaku reported that Humble Bundle's new update allegedly removed two-factor authentication and password verification checks. The report noted that users could reportedly change passwords without knowing the current one and change email addresses without verification to the old address. Kotaku stated it had reached out to Humble, owned by IGN, for comment.[1]
Screenshot of kotaku.com, captured Nov 12, 2026. Source [1]
Our read of the evidence
Mostly unverified. No primary source has confirmed the changes, and the only account comes from a single Kotaku report. Humble Bundle has not been quoted on the record about the redesign or the removal of authentication features. Independent verification and any company response are still pending.
Our rating counts evidence, not opinions about anyone: events confirmed by a primary source (the person's own post, their official site, a court or government record) weigh most, then how many independent outlets report the story.
Frequently asked
Is the Humble Bundle security issue resolved?
The latest development (Nov 12), reported by kotaku.com: Kotaku reported security features removed in Humble Bundle redesign.
What security features did Humble remove?
The update entirely stripped the site of two-factor authentication, according to kotaku.com. It also removed authentication checks when changing passwords or email addresses, meaning no verification is sent to the old email address.
How did users discover the Humble Bundle changes?
The update was initially discovered by users on Reddit, according to kotaku.com. Users reported that the option for two-factor authentication was missing and that they could change passwords without knowing the current one.
What other issues did the Humble Bundle redesign cause?
Beyond security, the redesign removed the differentiation between redeemed and unredeemed games, according to kotaku.com. It also removed the ability to remain logged in, forcing users to log in every time they access their library.
More related drama (4)
Sources (3)
Cite this timeline
This timeline compiles 1 dated events from 3 sources. If it helped your reporting, cite it:
GenZHype. “Humble Bundle Redesign Removes 2FA and Password Checks.”
GenZHype, 12 November 2026,
https://genzhype.com/gaming/humble-bundle-redesign-removes-2fa-and-password-checks/.