Skip to content
Translate Ideas and Comments
Choose language:
There was an error during translation
← Twitch UserVoice

Settings and activity

1 result found

  1. Stop requiring a phone number to set up 2FA.

    1,619 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    195 comments  ·  Account Management » Security and Privacy Settings  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    An error occurred while saving the comment
    deermountainer commented  · 

    I signed up just to upvote this.

    SMS is insecure. SIM swap attacks are common (see: https://en.wikipedia.org/wiki/SIM_swap_scam ), and users have limited ability to protect against them. My cell phone carrier has suffered many data leaks and hacks over the years. I have enabled every possible security measure on my cell phone account, but it's still the weak link in my security. I have a TOTP app, which is much more secure. I do not need or want SMS as a fallback; it only makes me account LESS secure.

    Also, phone numbers are not personal identifiers. They get recycled by carriers. I've had my current number for over 15 years, and I STILL occasionally get collisions with the last person who used it. What happens if I lose this phone number and someone else picks it up? What happens when THEY try to sign up for Twitch with the phone number I cannot remove from MY account?

    TOTP with recovery codes and/or email as a backup would be much better. This is how most services work.

    deermountainer supported this idea  ·