Turning off login password by code instead of password

[breekasey]

Every time I login I immediately get the password code option instead of logging in with my password. I have checked my login settings and there is nothing to delete or change. I don't want to use a code to complete the login. I want to use my password. I always check login by password, but I still get the code in my email.

[Maria · Accepted solution]

Hey there @breekasey,

Thanks for reaching out on the Community!

It's sound like you might have encountered one of the challenges which are associated with account security. They can happen randomly for a variety of reasons that cannot be predicted, as these challenges are sent as a measure of account security. 

We have these in place to ensure only you have access to your account, which means that they cannot be switched off.

Hope this clears things up!

[Paha_Agentti]

I also get the code EVERY time I log in. And now I have forgotten my password, but there is no way to reset it. So only way to log in is the code. Also everytime I close Spotify, I will be logged out.

At the moment logging in doesn't work at all.

[Brian]

Thanks but that doesn't clear things up. Please make it possible to select login using password as the default option instead of by code… I have to switch manually every time (and delete the code email I receive by default).

[NoThanksAlright]

This response is absolute ASS.

Do you understand that this is a security nightmare? A password is a secret, a code is something that could be read off of my device screen. If you want security, then do proper 2fa not this half assed bs.

[noneyourbusiness]

Yes this is total B.S. I have to stop and switch devices so I can get the code from my email. This never used to happen but last few months it is required EVERY TIME. If this keeps up, I may rethink my membership. No only is it extremely inconvenient, it is also not necessary give that I have a "top secret" password.  

[ndlarsen]

Agreed, this is pretty much sh*t. Also getting the code prompt roughly 90% of the time. At least allow proper, external, standards compliant mfa as an alternative.

[vegatripy]

This is very high security issue. Please, you should remove the mail code auth as a REPLACE for the password login. 
This is NOT 2FA, is alternative login method, relying just on the security of the email provider (lol. Good one to avoid your own responsability).
Remove this and allow the user the ability to activate 2FA via AuthAPP. It's 2025, this is almost a standard in the industry

[Nusername]

For the last month or so Spotify web browser defaults to code instead of password when attempting to login, absolutely pointless. Just an FYI, the more you make us click extra steps just to play some music, the more appealing other streaming services appear.

[jake104]

No this does not help, what account security??? what are you protecting, my 12 dollar account??? I don't want this, your users don't want this.  This is not a feature, this is an error disguised as a feature.  It needs to be fixed.

[jay_bale]

I agree with the comments above. This is a shitty approach. I've been spammed with code emails for a while from people, I asume, that are actively trying to bruteforce my account. This should not be a thing. A **bleep**ing six digit password is a joke. Enable 2FA and drop this nonsense.

[Whatatay]

Does anyone actually gives a rat's ass if someone logs into your account and listens to you music? I don't. Your website programmers need to stop feeling like they are more important than they are.

[Whatatay]

This is just more of the stupidity of web developers. They are never held accountable for their stupidity and laziness.

[vegatripy]

By having access to your account, they can change every single aspect of your account, from sensible user data, change or cancel subcription plans, change password, change linked apps, change privacy settings,... and You won't notice at all, not even in the next login.

Anyway, since you don't give a rat if someone else use your account, please, pm me your credentials

[wyred]

For some reason Spotify web does not keep me logged in when this rolled out and I have to login more frequently and it's annoying to visit my email inbox each time. Stop this feature!

[jrfuerst]

While I don't know much about security between true 2FA and the security code that comes through email, I suspect the Spotify users above are subject matter experts on the issue and know what they are talking about. From a practicality perspective, it is just annoying. Really annoying. For me, I host a radio show once a week, create my playlist through Spotify, and then when I get to the station, I log in, then have to log into an email account which requires its own 2FA to get the code. That process takes a minute or so to complete, and it is just annoying. Out of all the accounts I have, I have noticed Spotify's login method is different from others, and again, as not someone who really understands 2FA, that term is something I remember setting up on all previous accounts. So it would appear every other account I have uses 2FA. That would be much preferred for me with continued use of Spotify. 

[dmarinus · Accepted solution]

If you login using the following URL: https://accounts.spotify.com/login?allow_password=1

You'll get to the original login screen where you can directly login using your password.

[Jase1]

I'm not sure why such high security is needed on a spotify account. Worst case if someone else gets in, they listen to your music. It will all still be there... its not like they're stealing your CD collection. These codes are just an unnecessary pain in the **bleep**.

[Doughnut_Slayer]

Using this slightly modified URL, you will also immediately go to the web player after logging in: https://accounts.spotify.com/en/login?continue=https%3A%2F%2Fopen.spotify.com&allow_password=1

[xbmzh06djdvrdk12c73a]

It makes sense to have this security feature for people who want it, but for those of us who find it extremely vexing to receive an email every time we login on a new device, and who would really like to login using our password, it makes no sense not to give us the option to change our settings so that we do not receive email codes unless we request them. If we want our accounts to be less secure, it should be our choice. Have us agree to a disclaimer if you're that worried about it.