Skip to content
Translate Ideas and Comments
Choose language:
There was an error during translation
← Account Management

How can we improve the account management experience?

Account Management: Security and Privacy Settings

Categories

Stop requiring a phone number to set up 2FA.

First of all, good job on implementing non-Authy, non-SMS 2FA!

That being said, there's still a major hole in your 2FA implementation, and that's requiring a user to set up SMS authentication before they can set up other forms of 2FA. Unless I've missed something huge, whenever I try to set up 2FA on Twitch, I get directed to put in my phone number first. There's no prompt I can use to skip this step.

This is completely counter to how a lot of other sites do 2FA, where SMS authentication is an option, not a requirement. You can completely ignore SMS authentication and just use a standard TOTP code to set up Google Authenticator, etc. I would like to see Twitch adopt this practice as well: instead of requiring us to put in our phone number first, please just give us a list of 2FA options and let us pick a method without requiring the others. Or at least give us the option to set up SMS, set up an alternate 2FA method, and then remove SMS afterwards.

Not requiring SMS is important for several reasons:

  • It's one of the most insecure forms of 2FA. Relatively speaking, it's significantly easier to intercept a SMS or gain control of someone's number than it is to crack a TOTP token. (See this article for examples: https://arstechnica.com/information-technology/2018/08/password-breach-teaches-reddit-that-yes-phone-based-2fa-is-that-bad/) Requiring SMS means that everyone's account now has that "weakest link," even if they use a TOTP app.

  • Not everyone is comfortable giving their phone number to Twitch. Phone numbers are used for all sorts of things these days, including sensitive accounts. Some people just might maintain a strict online/offline life separation, and are wary of their phone number being leaked. Even if Twitch never intentionally reveals SMS authentication numbers to the public, hacks can and do happen.

  • Not everyone has a phone, or has a phone capable of receiving text messages, or a permanent phone number, or a phone that's recognized by Twitch as legitimate... Some people are still on landline for financial reasons. Some people are using small, alternative carriers like Republic Wireless or Google Fi, which get flagged as VoIPs. (Which Twitch does not allow for SMS authentication, despite those numbers being able to receive text messages.) The possibilities go on and on.

I'm sure there are many other reasons why requiring SMS authentication is a bad idea. I'm not asking for it to be removed entirely, but we should at least have the option of NOT using it.

Thanks for reading, and do correct me if this option already exists and I somehow missed it.

(See also: https://twitch.uservoice.com/forums/310228-account-management-e-g-login-connections-pass/suggestions/35025769-an-option-to-disable-sms-authentication-fallback-a)
1,619 votes

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

NinethLions shared this idea  ·   ·  Report…  ·  Admin →
How important is this to you?

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Frektoon commented  ·   ·  Report

    I have a problem with Twitch that this is the second time this has happened a year ago and now I can't write on the chat because they have to verify the account via a phone number where the streamer and I don't have it enabled before yesterday there was no problem for a very long time only yesterday evening problems started happening that I have to verify the account by force which I don't want because I don't feel the need and I don't like it when Twitch itself forces me to do it as if they couldn't give verification via e-mail instead of a phone number
  • JulioJamil commented  ·   ·  Report

    Truth be told... cell phone numbers are not safe!
    I don't know about other countries, but in Brazil, carriers cancel lines and resell the numbers.
    Linking verification or account security to cell phone numbers, which can change hands at any time, is not safe at all.
    I support using only email, and if necessary, a 2FA app from Twitch, but eliminating the use of SMS.
    I'm having a problem like this right now... I didn't receive the SMS, and after a while I asked again. And now it says that too many SMS have already been sent and asks me to try again later... but this message has been displayed for over 4 hours...
    And guess what... the SMS all arrived at once... and now I can't even try to use the last number because it doesn't even open the box to enter it...
    It's really unsustainable...
  • astralsynapse commented  ·   ·  Report

    This been an issues for every new Twitch divers. We created the account and got slammed with Verified Only chat and it saids Twitch wants it. This is a problem, considering that none of our numbers in our region can receive the code from twitch. We have to vote for this.
    TWITCH, STOP FORCING US NEW GHOSTS TO GIVE YOU YOUR NUMBERS OR WE WILL BASH YOU LIKE WHAT THE PROTOCOL DONE TO THE HUMANS!!!
  • ultrahuhwhat commented  ·   ·  Report

    Just like MishaTheWatcher, I've been hit with the bug where I'm required to get a phone number to chat on every single channel, including my own.

    I've contacted Twitch Support and they just gave me the generic "We want to keep chat safe and fun for everyone!" message. I've checked discussions on other places like Reddit and this issue has existed for at least 3 years and Twitch hasn't fixed it yet, so it's definitely deliberate.

    Sounds like Twitch wants to play dumb so it can harvest the users' personal data.

  • GouthaVirus commented  ·   ·  Report

    Purely because of the inability for twitch to send that verification text in my country that I cannot even gain basic modern account security. I'd rather have it as an option than it completely locking entire countries from having 2FA.
  • MishaTheWatcher commented  ·   ·  Report

    today, I need a phone number in order to even chat on EVERY. SINGLE. STREAM. Even in my own chat. ...
  • sstundzia commented  ·   ·  Report

    @WorstChan SMS phone verification is still needed to get your account the "Verified account" status. Without it you cannot engage in chat on certain channels. And of course the SMS verification just does not work.
  • WorstChan commented  ·   ·  Report

    In my other account I need a 2FA to stream but in this account it's okay without the phone number I wonder why, but hope it didn't need a SMS anymore since you don't resolve it even though you already know the problem, yes, I'm saying it to you Twitch Support.
  • lunisjeick commented  ·   ·  Report

    When it comes to life and safety, cheap or uncertified equipment can play a cruel joke. Choose only proven devices from well-known manufacturers that meet international standards. Quality life jackets https://gaelixmarineservice.com/safety/emergency-equipment-devices/, emergency beacons and first aid kits may cost more, but at a critical moment they can save your life. By purchasing equipment from reliable suppliers such as Gaelix Marine Service, you invest in your own safety.
  • HiShiMa9 commented  ·   ·  Report

    can i get my verification code now it is depressing to a crazy level. i bought a phone number just for this and i still dont get my sms!!!!

  • VoidTransmits commented  ·   ·  Report

    You know its bad when the partners under you are upping their own security. Curseforge just implemented TOTP themselves. On its own.
  • KRISDOX commented  ·   ·  Report

    Today is March 31st 2025 I tried adding my phone number to get phone verification, no SMS received. Tried to add 2FA and no SMS received either. I have been trying for days. I already streamed and get invited to be affiliate but since I'm not phone verified and no 2 FA I can't get onboarded. So what now? can't even set up anything at all! Nobody at twitch cares right small streamers don;t really matter anyway why even bother
  • niskeeper commented  ·   ·  Report

    Dear twitch support, when are you going to fix the sms issue that you guys have been having for years now?

    Can I get my verification code?
  • ShadoKenshi commented  ·   ·  Report

    I have been trying for ages and never receive the code so as far as they can tell my account is not verified despite having a verified email.

  • xSamiiSlayerx commented  ·   ·  Report

    twitch need to sort their **** out with this

    im trying to re enable 2FA and add my phone number back but i NEVER receive the dang code and havent been able to re enable 2fa for AGES now because when i try re add my phone number I NEVER GET SENT A VERIFICATION CODE! THEY always come back with oh make sure you havent blocked us from sending you stuff check with your provider blah blah blah none of them are the issue **** i didnt even know you could block twitch texting you codes so no i dont have them blocked ITS THEIR ISSUE THAT THEY REFUSE TO ACKNOWLEDGE AND FIX! girl i just want to be able to re add my phone number and re enable 2FA but i cant and twitch refuses to fix **** or even help meaning i cant re add sery bot to my channel i cant chat in chats that require a mobile number im over it FIXXXXXXXXXXX ITTTTTTTTTTTTTTTTTTTTTT
  • deermountainer commented  ·   ·  Report

    I signed up just to upvote this.

    SMS is insecure. SIM swap attacks are common (see: https://en.wikipedia.org/wiki/SIM_swap_scam ), and users have limited ability to protect against them. My cell phone carrier has suffered many data leaks and hacks over the years. I have enabled every possible security measure on my cell phone account, but it's still the weak link in my security. I have a TOTP app, which is much more secure. I do not need or want SMS as a fallback; it only makes me account LESS secure.

    Also, phone numbers are not personal identifiers. They get recycled by carriers. I've had my current number for over 15 years, and I STILL occasionally get collisions with the last person who used it. What happens if I lose this phone number and someone else picks it up? What happens when THEY try to sign up for Twitch with the phone number I cannot remove from MY account?

    TOTP with recovery codes and/or email as a backup would be much better. This is how most services work.
  • Zoomlogger commented  ·   ·  Report

    I just don't receive any SMS. Support's answer is "we know about the problem, but we won't do anything". Great.
  • alianaeleece03 commented  ·   ·  Report

    Omg I can’t get verified bc “my number is connected to another account” like what that’s the only account I have I don’t understand. It sucka when my favs stream and I can’t chat with them or the chat it’s mad annoying…

1 3 5 … 9 10