Why is Humble Bundle’s two-factor setting missing — and how do I protect my game library right now?

As reported by The Verge and Kotaku, Humble Bundle’s redesigned site is missing its authenticator-app two-factor setting, and emailed login codes now carry the security load. Humble had not clarified the change at reporting time. Here are five steps to protect your library and payment details today.

Short answer: As reported by Kotaku and The Verge on November 12, 2026, Humble Bundle’s redesigned website, rolled out around November 11–12, is missing the option to add or update authenticator-app two-factor authentication in its new security settings. Users report being asked for an emailed access code at login instead of the rotating code they previously set up, even though Humble’s own support pages still describe two-factor verification. Humble Bundle, owned by IGN/Ziff Davis, had not publicly clarified whether the removal is intentional, temporary or an incomplete migration — and nothing reported so far shows that accounts have been breached.Why it matters: If emailed codes now carry the security load, the safety of your game library depends on the safety of your email inbox.

Users also reported two worrying details: changing a password while logged in did not ask for the current password, and email-change verification went to the new address rather than the old one. Treat all of this as reported, not settled — but protect yourself as if the weakest version is true until Humble explains what changed.What to do today:1. Set a long, unique Humble password.

Generate it and store it in a password manager; never reuse it anywhere else.2. Secure the email account tied to Humble. Turn on authenticator-app or passkey two-factor there, because that inbox is now effectively your second factor.3.

Remove or limit saved payment methods. Keep stored cards off the account until Humble clarifies its security settings.4. Save your own proof of ownership.

Keep a list or screenshots of your library and purchase history somewhere safe.5. Watch Humble’s support pages for a statement before entering payment details again.Common mistake: Reusing your Humble password anywhere else is the real danger here. If that password ever leaks, every reused account falls with it.Ad’s take: Years of games sit in that library.

Ten minutes of password hygiene today is cheap insurance while the company finds its words.