112 results found
-
Stop requiring a phone number to set up 2FA. First of all, good job on implementing non-Authy, non-SMS 2FA!
That being said, there's still a major hole in your 2FA implementation, and that's requiring a user to set up SMS authentication before they can set up other forms of 2FA. Unless I've missed something huge, whenever I try to set up 2FA on Twitch, I get directed to put in my phone number first. There's no prompt I can use to skip this step.
This is completely counter to how a lot of other sites do 2FA, where SMS authentication is an option, not a requirement. You can completely…
1,619 votes -
Open standard 2FA with QR codes Could we please move away from the Authy only 2FA implementation currently used and provide standard TOTP and QR codes?
This would work much better for people who already have a stack of 2FA accounts in other solutions, remove reliance on a single application, fix issues with support (eg. Windows Phone), remove the need for a phone number (important for younger users I'd imagine) and generally increase flexibility and usability of 2FA for everyone by not locking us into a proprietary implementation.
388 votes -
add the ability to use a Yubikey or other kinds of usb 2auth devices It would be really nice to use a usb device for 2auth (something like the yubikeys).
251 votes -
Fix SMS Verification and Authy Issues for Ukrainian Twitch Users! Dear Twitch Team,
We, the Ukrainian community of streamers and viewers, are reaching out to you regarding a serious technical issue that significantly affects the platform’s development in Ukraine and prevents new users from fully accessing the service.
The Issue:
Account verification via SMS is not working on a large scale. Users do not receive confirmation codes on their mobile numbers during registration or when activating two-factor authentication.
Problems with the Authy app. New users do not receive SMS or a call for activation, making it impossible to use this service for two-factor authentication.
Due to the inability to verify…
248 votes -
Provide backup codes for 2FA Also provide other options for 2FA apps not just Authy
187 votes -
An option to disable SMS authentication fallback after enabling Authy. SMS as 2FA is well known to be the least secure of the methods available but still a better option than no 2FA at all, but I suggest an option to disable it as a fallback after having enabled Authy to lessen the security risks to the user account. You could learn from others mistakes such as Reddit's: https://arstechnica.com/information-technology/2018/08/password-breach-teaches-reddit-that-yes-phone-based-2fa-is-that-bad/
163 votes -
LEAVE GENERATIVE AI TRAINING OFF BY DEAFULT, OR BETTER YET DONT TRAIN AI OFF OF STREAMS. LEAVE GENERATIVE AI TRAINING OFF BY DEFAULT, OR BETTER YET DONT TRAIN AI OFF OF STREAMS!!!
74 votes -
Stop using my mobile number for creating an Authy account In https://help.twitch.tv/s/article/two-factor-authentication?language=en_US#Emotes?tt_content=two_factor_emote_rewards&tt_medium=notification_center it says that "When you set up Two-Factor Authentication on your account, an Authy account is automatically created for you even if you choose to actively use an alternative authentication app. This means you can fill out Authy’s Phone Change Form and recover access to your account." I don't need you creating an Authy account behind my back. You have to give us the option to undo this.
49 votes -
Stop forcing people through phone verification, even for those channels that don't require verification. Twitch Support seemed to say you'd Twitch Support said you'd be "happy" to receive my feedback so here it is:
Now you are forcing people to undertake phone verification on a whim for whatever discriminatory reasons you choose to, so that you can't chat in channels that haven't opted into "phone verification" and now you remove the ability to chat anywhere based on this.
I've had my account 6+ years without this requirement, yet this weekend it was thrust upon me, even in my own channel or channels that don't have a phone verification requirement set and since I have been provided no reasoning or justification…
34 votes -
Please Fix 2fa set up so that it works with all phoneS Please Fix 2 fa so it works with all phones. I am currently having to find a work around because MY cell carrier is NOT supported. it is preventing me from getting my affiliate that is B.S. There should be another option to authenticate other than cell phone OR your system should just send a code out to what ever # i put in even if it is not on some list. this is crazy as my Number works for every other site on internet!
30 votes -
U2F/FIDO support for Authentication I understand Twitch has recently allowed people to use other apps for means of authentication, but please allow users to use U2F/FIDO authentication, this is not only more secure but also very reliable. Having a U2F as primary with a TOTP as a backup is in my opinion the best method of security, given that Affiliate/Partner accounts hold alot of personal Tax information, I feel this fits more as it's such sensitive information.
30 votes -
remove 30-day re-auths Requiring users to enter some code via sms every 30-days is just stupidity disguised as security theatre. These codes do nothing to further protect our data at-rest, nor do they validate identity. It's just another unnecessary hoop to jump through. If it wasn't a meaningless, pointless, futile exercise, you wouldn't have added a 30-day option to not-validate - you'd be validating with every new browser instance. We don't need another TSA in our lives.
21 votes -
I can't verify my account with my phone number Hello,
I would like to ask Twitch Support or whoever works here to look at their verification system because it just doesn't work. Two days ago I got a "A verified phone number is required to chat in this channel", at first I thought it was for the channel only but then I went to like 30 different streamers and its definitely site wide. After 8 hours or so, the verification lock disappeared and I was able to chat again, then today I tried to send a youtube link in a twitch chat and the lock happened again. The problem…
20 votes -
Stop sending successful log-in emails from known locations I already have 2FA. I do not want emails confirming a login, especially if it's from a known location. Please add an Unsubscribe option for this notice.
20 votes -
Do not go through with implimenting "Facial age estimation technology" According to a post by Zach Bussey, Twitch is planning on implementing "facial age estimation technology" to ensure that the account's user is of the age they claim to be. There are many reasons to go against this, like security of the pictures or videos used, preventing false claims like people claiming to be a famous celebrity to evade age regulations, amongst others, but for me personally it's the limitations of these algorithmic based systems on people like me who look much younger than my written age. I'm in my late 20s but a few months ago when picking up…
17 votes -
allow complex passwords I tried to use a password that is autogenerated by my password manager. Obviously I won't put that here, but another one generated by it is: "speed applause deceiver endpoint cash freckles polygraph mothball unsaid raffle vacant unmoved".
This is apparently "not secure" and "too easy to guess". Instead I had to make it: "speed applause deceiver endpoint cash freckles polygraph mothball unsaid raffle vacant unmoved1!"Its worth pointing out that adding a password requirement of any kind besides length and restricting obvious dictionary sequences is well known (even by the US government via its most recent NIST standards) to…
17 votes -
Option to not receive gift subscriptions in channels you follow. To have the possibility of not receiving gift subscriptions in any channel. Currently, you can deactivate the receipt of gift subscriptions in channels that you don't follow but not in the ones you do follow, would be good to have an option to deactivate this completely regardless of whether you are a follower or not.
14 votes -
Verification code Well, I have the similar problem from other people. I tried the "Add phone number" menu and tried the "Setup 2FA" on Twitch settings menu but it didn't work because I didn't receive any verification code on my SMS, even I tried to change SIM card to another phone it didn't work, and please I don't have any phone numbers blocked, my device has sufficient signal and receiving SMS from other services, and never used “Do Not Disturb” mode, as Twitch Support said. I'm not sure this is Twitch problem or maybe region problem, and please once again, STOP promoting…
13 votes -
Allow an option to login with SMS or verified email Why do I have to use just SMS code login options when I went through the process of verifying my email. I should be able to chose SMS or email verification and if I'm trying to change my SMS code phone number why does it send a code to the phone number I'm trying to change? why not send a email to my already verified email. When I'm trying to disable 2FA why isn't there a option to disable it via email as well? Also if you no longer have your phone number you had when you made the account…
13 votes -
Authy app, It is so hard to sign in when I do not have a cell phone number for this authy app anymore. Please change this for ppl. This is make it so difficult to stream now. Please go back to the old twitch where I can sign in with just my email please!
12 votes
- Don't see your idea?