Humble Bundle removes two-factor authentication from redesigned storefront

Humble Bundle’s redesigned storefront removed two-factor authentication around November 11, 2026, so customers cannot add or turn on the account-security feature.

Kotaku confirmed through tests on its own account that a logged-in user can set a new password without knowing the current one, and that changing an email address sends no alert to the previous address. The outlet also found that the site offers no way to stay logged in, so customers must sign in every time they open the library. Techtroduce reports that previously configured login authentication is no longer requested at sign-in, meaning some users can enter without their usual codes. Techtroduce also cites GamingOnLinux as flagging that account email changes proceed without confirmation to the previously registered address.

Humble accounts can store years of game purchases, unredeemed keys and active subscriptions, and the library no longer clearly separates redeemed keys from unredeemed ones. Filtering tools are harder to use, and some previously purchased games and bundles do not appear in library views. Some users see a notice that content is being moved into the new interface. Techtroduce says this makes the missing security features especially serious because the account interface may be the only way to retrieve unredeemed keys.

Kotaku advises users to delete saved payment information from Humble accounts until the security problems are fixed. IGN owns Humble Bundle, and the outlet said it asked IGN-owned Humble for comment.

Humble Bundle has not said whether the two-factor authentication removal is deliberate, temporary, or caused by an incomplete migration. The company has also not given a verified timeline for fixing the authentication and library problems.

Some people are reporting errors that stop them from buying new bundles. Kotaku says people are reporting myriad issues beyond the missing security features. Techtroduce says the changes appearing around November 11, 2026, affect the storefront, library, purchase history and Humble Choice subscription interface.

Humble Bundle says Humble Choice costs $14.99 per month, members save up to 20 percent in the store, five percent of membership fees support charity, and an annual plan costs less than $13 USD per month and can be skipped anytime. Techtroduce reports that some subscribers say the skip-month option for Humble Choice is no longer available, and that Humble Choice redemption controls no longer take users straight to a game’s activation key.

Techtroduce says Humble Bundle usually provides Steam activation keys instead of adding games directly to a customer’s Steam account, so buyers who already added games to Steam directly are not necessarily affected by Humble library display problems. Anyone with unredeemed keys may still depend on Humble’s interface to retrieve them.

Customers say order dates, past purchase details and extra bundle items are missing or hard to locate in the new library, Techtroduce reports. Old purchase links send users to the main library instead of the specific bundle page. Reported problems also cover missing key-expiration details and downloadable extras that cannot be accessed.

A customer said the new library restricts search results to a few per page, making older purchases harder to reach, Techtroduce reports. The outlet says no verified proof exists that missing purchases were permanently removed from accounts. Until Humble clarifies its account-security features and completes any library migration, customers with extensive unredeemed collections face uncertainty over when normal access and key management will return.

Kotaku reports that users on Reddit initially discovered the redesigned storefront and flagged that it had removed two-factor authentication and other protections. The outlet says the redesign had already been live long enough for users to spot absent security settings and purchasing errors, and that many users say the redesign removed or hid older features, making the site harder to use. Techtroduce says critics have called the redesign AI-assisted vibe coding, but no verified proof exists that Humble used AI-generated code.

Humble Bundle’s homepage already showed a new look on November 10, 2026, and the company described the redesign as a visual refresh while promising the same service. The announcement also advertised Humble Choice pricing and featured games. Techtroduce says the broader changes appeared around November 11, 2026.

Techtroduce recommends using a unique strong password, checking old purchase emails for records, and keeping copies of keys you can still access. Complaints from November 11 and 12 show many customers have similar issues, but the outlet does not confirm the number of affected accounts or if every regression is permanent.