I agree! My newsletter TOS.gg (people should join for streamer news stuff!!) uses no passwords but magic links instead. So much easier, safer!

We recognize that these overly strict password requirements don’t necessarily enhance security but instead make passwords harder to remember and enter. It almost seems like a step backward to outdated password practices from the 1990s—both surprising and counterproductive.

We understand enough to know that these extreme password requirements don't actually make passwords more secure, only more difficult to remember and type. Truly, it feels like a regression to the ideas people had about passwords in the '90s. Genuinely shocking and demonstrably counterproductive.

I'm dealing with an issue were I try to put in my password tells me I'm wrong so I reset it but it's still saying I'm wrong I used every password I have created for twitch but some how all of them were wrong as if I no longer have a password on this dame account all I tried to do was change my username yet now I can't do anything what the **** twitch

I gave up on trying to sign into my account today. Wanted to watch a stream, haven't logged in in a few months. Twitch asked me to set up a new password. After 20 minutes of trying my usual passwords, variations thereof, and finally flinging random words at Twitch trying to find ANYTHING it would accept as strong, I managed a variation of "GofuckyourselfTwitch" that was readily accepted as a "fair" password.

I was then treated to a further 20-25 minutes of verification codes, sent to my phone, my email, and some other recovery email I don't remember ever setting up. I was then told my verification code had expired in the time it took me to get the code and enter it. So I resent the code - and Twitch sends me the same expired code! So I try it anyway and I get "we have tried to validate this code too many times". Now I'm locked out and I've lost all interest in using Twitch in the near future. All this did was remind of what a cockup nightmare it is to sign into Twitch. But I guess just *******, right?

Then, just now, I had to sign in to leave this comment. Twitch tells me I have to use a verification code it will send me. No code sent. Out of sheer frustration I enter the code it kept sending me earlier, that it also said was no longer valid. Before I can finish typing the code in, the page suddenly refreshes and signs me in. Good stuff. Really see that super duper strong security in action.

Seriously. Fix your ****.

Absolutely ridiculously stupid use other worst just like Google and any other tech company out there use a horrible you should literally change your name okay cuz you do absolutely nothing for the people I don't care if you are a business and use a trying to make money this is a platform for people to watch people connect with people and it is I don't care about your algorithm this has been going on for years okay you should not have to be told every if you try 10 different passwords you should not ever have to be told 10 different times that's not good enough that's not good enough I literally typed in rand 26 different random characters okay and it still wouldn't accept it I basically type the whole alphabet and it wouldn't even accept that so I don't want to hear this stuff from people on Reddit talking about oh you have used the past tense same password for the past 10 years oh la la la la I mean people are just wine bags dude seriously you need to upgrade your s*** are you forgetting that we are the people creating the accounts we don't need to put a password that is divisive for your needs it's supposed to be rememberant and decisive for our needs remember that f*** twitch

It's over a year since this was brought up and still no change??? WHAT THE ACTAUL **** TWITCH HOW ARE YOU THIS ******* ********
I was going to start streaming in your platform but nevermind, BECAUSE I LITERALLY HAVE TO RESET MY PASSWORD EVERY ******* TIME I GO TO LOG IN AND IT TAKES LITERALLY 30 FULL MINUTES TO DO SO GO **** YOURSELF AND YOUR WEBSITE I CAN'T BELEIVE I WASTED AN ENTIRE DAY TRYING TO SET UP MY ACCOUNT JUST TO REALIZE YOU'RE ******* ********
This is why everyone is going back to youtube ffs

The current state of twitch is a joke. after having to create a complex 43 character password because everything else before that was deemed "too weak", I try to vote to change this which gave me a little bit of hope. Which was quickly snuffed out after having to login 5 times on the app and 2 different browsers just to vote for this.

I don't think the issue is the password requirements; I think the issue is communication. When Twitch rejects a password for being weak, it should explain why the password is weak. The average user doesn't understand the theory behind password security. When you're creating a password, you're not creating a password that will be difficult for a human to guess, you're creating a password that will be difficult for an automated system to guess.

And for what it's worth, I've never had an issue with Twitch's password requirements because I use a password manager.

password manger are thing

Js I did 12 pin with upper, lower, symbol and numbers still too easy. They need to lower the bar a bit. Not like -Amazon- twitch is actually going to do anything about account fraud anyway.

I understand wanting the site to be secure but Twitch is not Fort Knox, and it shouldn't be this complicated to create a password. My bank doesn't make it this much of a pain ********** to do this.

Its an incredibly obnoxious password requirement. I'm just using twitch to watch a single football game streamed there, and because of the recent ridiculous password requirements, I wont use it anymore. And if thats not enough, we still have to get an e-mail code on every login. That's ridiculous for a front-end user on a unimportant / non-essential platform. It's much more rigorous than banking platforms. It makes no sense whatsoever and will reduce the user-base dramatically. You're being clearly sabotaged by your security or legal teams.

I left twitch for 3 years due to the obnoxious politics that came up. Decided to come back to watch an old friend of mine, and was really astonished by how unnecessary the password parameters are for your log in now. As a computer engineer that specializes in cyber security, I understand why passwords can need to be that secure..... For use cases that are much more risky, like high level govt intel, or internal feduciary management! Not a user for your platform front end. Not everyone wants to have to use a password generator and management program just to log into twitch. Life just doesn't work that way, and whoever at your team thought this was a good idea is either a troll, or very very nieve in how use cases work. All you are going to do is push away the average user, and kill the platform. Which ngl I wouldn't be all that sad over anyway. Do better or get wrecked. It's not hard. There are open source alternatives that can absorb your users and content creators pretty easily. I already moved on to peertube for my platform of choice alt to YouTube.

"minimum 8 characters" ...ok, well when i type a very reasonable password that is longer than 8 characters, it just doesn't work unless i add some random letters at the end :(

Hands down one of the stupidest things ive ever seen. Fire whomever thought this was a good idea, because if they are that out of touch, they are obviously ******* up other places twitch management isnt catching.

overly harsh "secure password" restrictions
how about when making an account you allow people to use entire words in the password without having to use 7 words... why the **** do u have more password hoops than banking institutions.... im not memorizing a string of letters and numbers with no discernable patterns to comment on some video game feed... looks like its back to youtube with another one...yes i made an account with a password i wont remember just to post this

Cool it with the password strength even my bank doesn't require such complex combinations its excessive and unnessesary. Also you emails take forever to send when resetting it improve this.

+1. Kept me off the platform for quite a while. Once I forget this new password, I probably won’t be back. What a shame the developers seem to have a passion for destroying the site.

A nonsense word composed of 15 characters, uppercase, lowercase, numbers, and symbols using my normal pattern is still too weak, nice to see i am going to have to reset my password the first time i have to type it in after today