Stop requiring a phone number to set up 2FA.
First of all, good job on implementing non-Authy, non-SMS 2FA!
That being said, there's still a major hole in your 2FA implementation, and that's requiring a user to set up SMS authentication before they can set up other forms of 2FA. Unless I've missed something huge, whenever I try to set up 2FA on Twitch, I get directed to put in my phone number first. There's no prompt I can use to skip this step.
This is completely counter to how a lot of other sites do 2FA, where SMS authentication is an option, not a requirement. You can completely ignore SMS authentication and just use a standard TOTP code to set up Google Authenticator, etc. I would like to see Twitch adopt this practice as well: instead of requiring us to put in our phone number first, please just give us a list of 2FA options and let us pick a method without requiring the others. Or at least give us the option to set up SMS, set up an alternate 2FA method, and then remove SMS afterwards.
Not requiring SMS is important for several reasons:
It's one of the most insecure forms of 2FA. Relatively speaking, it's significantly easier to intercept a SMS or gain control of someone's number than it is to crack a TOTP token. (See this article for examples: https://arstechnica.com/information-technology/2018/08/password-breach-teaches-reddit-that-yes-phone-based-2fa-is-that-bad/) Requiring SMS means that everyone's account now has that "weakest link," even if they use a TOTP app.
Not everyone is comfortable giving their phone number to Twitch. Phone numbers are used for all sorts of things these days, including sensitive accounts. Some people just might maintain a strict online/offline life separation, and are wary of their phone number being leaked. Even if Twitch never intentionally reveals SMS authentication numbers to the public, hacks can and do happen.
Not everyone has a phone, or has a phone capable of receiving text messages, or a permanent phone number, or a phone that's recognized by Twitch as legitimate... Some people are still on landline for financial reasons. Some people are using small, alternative carriers like Republic Wireless or Google Fi, which get flagged as VoIPs. (Which Twitch does not allow for SMS authentication, despite those numbers being able to receive text messages.) The possibilities go on and on.
I'm sure there are many other reasons why requiring SMS authentication is a bad idea. I'm not asking for it to be removed entirely, but we should at least have the option of NOT using it.
Thanks for reading, and do correct me if this option already exists and I somehow missed it.
-
Propotat0
commented
This is 2025 where people respect themselves and should not be forced (by law) to give private information if they don't want to nor have to. You are just getting bad reputation because of it there are other methods to control trolls that totally respects privacy of the end users. And you know... your competition doesn't ask for that. At least not viewers.
-
geminissoul
commented
Well its easy why they dont free this up than certain twitch users couldent be targeted as easy shadow ban be silenced in chats and have their content stolen plus other big big no nos that they dont want out
-
ubaid_us
commented
they are planning and thinking about freeing up the user names but not this which have more up votes i mean how hard is it i am a dev myself just use any otp service if your devs are not able to solve this just go with firebase two three days work at top
-
misshell23
commented
Hi there,
I want to speak in Tchat with my favorite streamers and viewers and i can't because i dont have a smartphone, therefor no phone verification possible.
Support response : use a valid phone number just once, and you would be abble to tchat freely on twitch...
-
YourMajestyKing
commented
I totally agree. It’s not fair that we have to give our phone number to turn on 2FA. And sending SMS messages IS NOT really safe when we want to keep our accounts secure.
-
ultrahuhwhat
commented
YouTube will start requiring that users who don't pass their AI age verification check to show their credit card or government ID to prove their age. I'd like to think that YouTube's overreach is inspired by seeing zero user revolt over Twitch requiring phone numbers for account authentication.
-
resutay
commented
Its Frustrating when Amazon and Banking can get around this issue WTF - TWITCH
-
thedanofdans42
commented
Stop requiring phone numbers sitewide fullstop. Streamers already have the option to require it on their channels if they chose.
In some countries your phone number is directly linked to your home address, passport number, licence number etc. and due to large hacks of multiple major phone companies this data is now public for malicious actors to access.
Linking a phone number in these circumstances is a major personal security risk
-
blacklightxxxx
commented
Linking your phone number can also be a security issue for people in general, a lot of people in public jobs where harrassment can become an issue have their numbers hidden from 3rd parties. Having your phone number linked into a platform as unsecure as twitch can become a life or death situation for people should that info become compromised by data harvesting or good ol' hacking.
-
geminissoul
commented
I just caught twitch lying on multiple occasions I even have the emails to prove it saying my email i was contacting them back from was not the one linked to my account which it was right from the email they sent the contact support ticket back to i had to take screenshots of the emails contacting me and that it was in fact the one connecting to my channel it seems they like to add ilegal shadowban on accounts my suggestion is start publicly putting out on social media on what twitch is doing i even have someone under a different social media account acknowledging my content was stolen so not only should we be publicly putting twitch for their ilegal practices but we should be contacting support just as much as we need to just to have these ilegal shadowbans removed and our pages fixed so we can enter the correct phone numbers emails and other such data they didn't want to fix viewer count issues with certain channels for years it seems there is a good reason for it because these con artist promoters can fix the viewer count just fine twitch is actively sabatoging small streamers so they can't grow this really needs to be brought to light i posted on my Facebook and my Twitter account the emails proving they are liars so not only are they lying about our accounts they are promoting view bots on their platform and they aren't doing anything about it
-
geminissoul
commented
Seems I always have that one viewer count in my room im going with twitch has technical support that knows how to hack ips at the moment because I called it out on mic how they were messing with my frame rate and my internet connection and it was coming from twitch and it magically stoped im also going to point out multiple people coming back to me about stolen content do what im guessing is other streamers block me on the stolen content channels and use multiple accounts to stalk me and steal my work they also seem to contact me with fake Caleb opertunites just to listein to me and my ideas and take off and use them I noticed outright my ideas being used in new specific titles that were being used in world of warcraft seems to me that dont like being called out on their manipulative behavior or reported it also seems twitch supervisors cover up for said stolen work viewer counts being altered and the way your channel is being manipulated in search results within the company the use of shadowbans is also alarming when the reasons for said shadowbans never occuried bringing a alert to perhaps your channel is being isolated so other streamers dont catch on to what is happening to touch base on this topic contact twitch support does nothing to fix a easy problem of getting your phone number updated or sending out sms codes to said phones as a humantraffick victim I find all of this odd because I know how traffickers like to use you for work im just putting this out there but I think twitch needs a internal investigation
-
geminissoul
commented
There has been a ton of issues with phone verification i had to make a whole new page to get it to work almost seems there is someone connected to twitch always viewing me I dontvwatch my stream just the chat sometimes they join right away sometimes a half hour or so seems to be all they do is try to make false reports and shadowban me and flag my vod for music thats not even in the videos or clips so they mute it must be talking about subjects they dont like
-
resutay
commented
@DarqIsLive i commented to this because Customer Service said that No One has any issues with their Phone Verification System
-
DarqIsLive
commented
What's the point of commenting, when Twitch ignores everything.
This is just an alibi site to pretend they care about their customers.
No action for 5½ years so far -
Pengwin83
commented
I cancelled my subscriptions until this is fixed. I used twitch for years and am verified by email for that time. If Twitch wants to drive customers away, they are one the right track.
I just got flagged about 10 days ago by twitch, so ALL channels are now "Verified Only". I am locked out from participating in chats until I provide my phone number.
I got turned down twice by twitch support stating they are "unable to take care of this problem". Who else should fix it? You caused it, you fix it. Else I can only assume that this is caused intentionally. And also that they are not unable, but unwilling to fix it.
I will not provide any phone number for multiple reasons, e.g. security. There are also other options to enjoy my favorite streamers. And if I am forced to use those options, the joke is on Twitch. -
dingledorf_
commented
I've cancelled my subscription until the issue is fixed. A bit of a slap in the face really, paying money to subscribe and then be blacklisted from commenting.
Haven't been able to verify with a phone number for a long time, not an issue until one day all channels came up as Verified Only.
-
bdph2008aa
commented
SIMPLY I WILL JUST TO TO KICK AND YOUTUBE AND GIVE THOSE CHANNELS MY MONEY F TWITCH FOR LETTING SOMEONE LIKE aNDV AND HIS GREW KEEP THERE TWITCH CHANNELS EVEN THOUGH THEY HACKED MY DISCORD WHICH IT TOOK ME 2 MONTHS TO GET MY DISCORD CHANNELS BACK WITH MY OLD FRIENDS FROM NEW WORLD
-
bdph2008aa
commented
WELL SIMPLE I REFUSE TO PAY CHANNELS ANY MONEY THAT REQUIRE ANY VERIFY ONLY ACCOUNTS.. ESPECIALLY THAT DOESN'T STOP PEOPLE FROM GETTING HACKED IT ACTUALLY MAKES IT EASIER CAUSE BY SEEING THAT THEY HAVE TO BE VERIFIED YOU KNOW WHO TO TARGET FIRST
-
geminissoul
commented
From what I discovered twitch allows and takes bribes from a illegal program called gang stalking or targeted harassment it maybe a lot easier for folks with constant problems with their chat entering information on their account constant shadowbans and other forms of harassment to switch to the platform kick or youtube for their streaming careers evidence I have found is they will willing accept bribes to have your channel shadowbanned let others steal your work even if it is copyrighted and use it as their own and other ilegal activites they attempt to hide behind their llc but this tactic will only work so well for their employees involved if your chat is not working if you can't update information send a message to twitch through their contact support enter general and put down reasons not listed then ask them to remove the shadowban my subject line always has please do not remove added to the end twitch refuses to fix this and blames it on cookies which I deleted all of my web browsing history cookies etc and still have the issue after so many complaints its not even funny I have my channel flagged for everything but gambling they give the excuse that violent behavior occurs in chat even though that section is flagged I dont even post any violent behavior and mostly talk about the games im running tactics or other such things my investigation concluded twitch will take bribes to shadowban and alter your channels webpage on their system and try to side step everything I have plenty of files to show gangstalking is real aka targeted harassment and the steps that are taken in it including Bribery blackmail or just plain talking some poor soul into thinking it is a good idea this stalking also includes cyberstalking which it seems twitch is in full support of my biggest suggestion is find a new platform to stream on and boycott twitch my next suggestion is report twitch ilegal activites to ic3.gov if you are within the United States
-
geminissoul
commented
It has come to my attention that twitch.tv is accepting bribes to shadowban and cause these issues scamers clone your phone cyberstalk you in their whole big networking scheme they will also buy your previous phone numbers so they can further harrass you and keep you from changing security details twitch needs to stop following suit with these ilegal activites and fix the issues reports have been made to ic3.gov if you too believe you are being taken advantage of by cyber criminals and live in the USA I will suggest you contact ic3.gov and file a complaint