61 results found
-
Please Fix 2fa set up so that it works with all phoneS Please Fix 2 fa so it works with all phones. I am currently having to find a work around because MY cell carrier is NOT supported. it is preventing me from getting my affiliate that is B.S. There should be another option to authenticate other than cell phone OR your system should just send a code out to what ever # i put in even if it is not on some list. this is crazy as my Number works for every other site on internet!
25 votes -
Say no to 2 factor authentication(sign in with 2 passwords etc.) and don't punish people that don't want it. Keep with a normal password requirement but lose the 2 factor junk. If someone enters their password wrong too many times temporarily lock the account and have the user unlock the account through their email while also advising the user of the attempts. This doesn't fix the issue of bad actors who know a users account name (unless user name and id can be seperate?) - giving the user a headache from having to keep unlocking their account through their email, but it doesn't/shouldn't inconvenience the majority of other users.
I don't want 2 factor junk but am forced to…2 votes -
Allow disputing phone number useage I have had my phone number for over a year now and I am unable to use to due to the fact that whoever had it before has it registered to THEIR account. When I contact support after having explained that the account the number is currently connected to isn't mine and I don't know the person, they tell me to VERIFY THAT THE ACCOUNT WITH THE NUMBER IS MINE.
Please. Upgrade your support and make it easier for people to claim THEIR PHONE NUMBERS.
1 vote -
U2F/FIDO support for Authentication I understand Twitch has recently allowed people to use other apps for means of authentication, but please allow users to use U2F/FIDO authentication, this is not only more secure but also very reliable. Having a U2F as primary with a TOTP as a backup is in my opinion the best method of security, given that Affiliate/Partner accounts hold alot of personal Tax information, I feel this fits more as it's such sensitive information.
22 votes -
allow complex passwords I tried to use a password that is autogenerated by my password manager. Obviously I won't put that here, but another one generated by it is: "speed applause deceiver endpoint cash freckles polygraph mothball unsaid raffle vacant unmoved".
This is apparently "not secure" and "too easy to guess". Instead I had to make it: "speed applause deceiver endpoint cash freckles polygraph mothball unsaid raffle vacant unmoved1!"Its worth pointing out that adding a password requirement of any kind besides length and restricting obvious dictionary sequences is well known (even by the US government via its most recent NIST standards) to…
16 votes -
Stop using my mobile number for creating an Authy account In https://help.twitch.tv/s/article/two-factor-authentication?language=en_US#Emotes?tt_content=two_factor_emote_rewards&tt_medium=notification_center it says that "When you set up Two-Factor Authentication on your account, an Authy account is automatically created for you even if you choose to actively use an alternative authentication app. This means you can fill out Authy’s Phone Change Form and recover access to your account." I don't need you creating an Authy account behind my back. You have to give us the option to undo this.
42 votes -
Disallow (or add option to disallow) SMS password reset Now that Twitch has enabled streamers to require phone number verification to use their chat, I and many others have had to add a verified mobile number to my account. The problem, however, is I can now reset my password via SMS, which I did not ask for. This is especially problematic because Twitch's 2FA solution can also be bypassed via a phone number that's required to set up 2FA at all, even if the user has a secure authenticator app, meaning an attacker with access to the user's phone number can defeat both factors. Twitch just suffered a data…
3 votes -
Better account verification steps when you forget your password I forgot the password to my account and didn't receive a single password reset email. I tried to verify my account through customer support but they said they couldn't verify it. Being as I don't have any of the information they request linked to my account other than my email it's a bit redundant. If there was a way of verifying via linked account such as a PlayStation Network account, or via a Discord account, it could make the whole process much easier.
4 votes -
Ability to disable the display of your badges on your profile Now that sub/bit badges etc have been added to display on your profile when someone clicks on your name in chat. It would be nice to have the ability to hide these from public view if you want.
2 votes -
Send in the right code Every time I put in the code that you sent me it says that it’s wrong and I’m getting pretty annoyed. Please send me the right code.
1 vote -
IP logging Log IPs of all attempted logins to an account. This way we can report suspicious behavior to you and to authorities/banks when it occurs.
Reason being, I have received multiple 2FA codes on my phone and have no way to report these unauthorized attempts to access my account. I have changed my PW and am still receiving these codes. I have ran two separate virus checkers and come back empty from both.
Thank you.
3 votes -
2FA Form Maybe a personal opinion but having to search the country code manually by scrolling through the list box is not very intuitive. I would like to suggest have a list of countries followed by their dial code rather than the dial number(country code)
Also the ability to search by text would probably help for lazy people like me
1 vote -
Authy app, It is so hard to sign in when I do not have a cell phone number for this authy app anymore. Please change this for ppl. This is make it so difficult to stream now. Please go back to the old twitch where I can sign in with just my email please!
9 votes -
hide phone number/added security when you look in the privacy settings in your account, you can see the full phone number for your 2FA. Can this be blocked? When changing and entering into privacy, pw and 2fa is enabled again. amazon does this and I feel that they are taking our privacy seriously. 2FA just doesn't do it anymore, esp if you can bypass it the first time
2 votes -
Implement One Time Code by Email When you sign up for a new account you are asked to input a one time code through email.
Please implement the One Time Code for ALL, EXISITING & NEW accounts when logging in.
Context: I do not have an active cell phone, I live in an area that does not receive SMS Text for the login code, therefore I can't use Authy either. I've been trying to log back into my account for about 3 weeks at this point with help from friends, but to no avail it didn't work.
Conclusion: Please implement this into the login system, it…
7 votes -
Provide backup codes for 2FA Also provide other options for 2FA apps not just Authy
165 votes -
An option to disable SMS authentication fallback after enabling Authy. SMS as 2FA is well known to be the least secure of the methods available but still a better option than no 2FA at all, but I suggest an option to disable it as a fallback after having enabled Authy to lessen the security risks to the user account. You could learn from others mistakes such as Reddit's: https://arstechnica.com/information-technology/2018/08/password-breach-teaches-reddit-that-yes-phone-based-2fa-is-that-bad/
136 votes -
add the ability to use a Yubikey or other kinds of usb 2auth devices It would be really nice to use a usb device for 2auth (something like the yubikeys).
225 votes -
Non-Reachable Emails Allot of different websites offer this feature, but, how about making it so that if you somehow in someway can't login to your account after reporting missing credentials, it will offer you the chance to send the email about (e.g resetting your password) to an email that you can access.
8 votes -
Open standard 2FA with QR codes Could we please move away from the Authy only 2FA implementation currently used and provide standard TOTP and QR codes?
This would work much better for people who already have a stack of 2FA accounts in other solutions, remove reliance on a single application, fix issues with support (eg. Windows Phone), remove the need for a phone number (important for younger users I'd imagine) and generally increase flexibility and usability of 2FA for everyone by not locking us into a proprietary implementation.
347 votes
- Don't see your idea?