[All Platforms][Other] 2-Factor Authentication

[ThomasVH]

Spotify should, as a matter of good practice and safety, implement 2-step authentication.

Previously, Spotify enabled the option to log out other sessions other than the current session.

This would prevent hackers from stealing accounts, which would additionaly lead to less account hacks and less work for Spotify employees to assist in these cases.

More info: https://twofactorauth.org

[SPLUS1]

To add second factor authentication to Spotify accounts. To add additional security to login to our accounts and maybe reduce the security emails alerting us that there is a login attempt. Types of 2FA you can use: DUO Security, Google or Microsoft Authenticator apps, OTP text to phone, etc.

[Luan]

Updated on 2023-10-12

Thank you for sharing your feedback with the Spotify Ideas Exchange.

Your suggestion has been marked as a New Suggestion and will be reviewed by the Spotify staff once it receives enough votes. We appreciate your contribution and look forward to your continued support of this idea!

For more details about how the Ideas Exchange works, please refer to here.

[MemelistasMX]

Any updates on this? 😞 Two factor authentication still not an option, at least on my profile 😞

[Atheos1]

Well 1 November price goes up, but functionallity keeps getting worse, no 2fa and search is getting worse and worse so now after 6+ years as paying customer I have closed my Spotify account and went to Youtube family instead (youtube music included) I had both for couple of weeks and did not miss anything in Spotify.

[joeycjohn191]

Proposal:

Spotify should alter its security system design to allow for 2-Factor Authentication or have a method in place to allow for users to confirm that they are indeed the logging into a device. 

Reason for Request:

I like to use Spotify at work. My work has very strict network security measures in place and as such utilize private network and proxy. Every time that I log into the desktop Spotify App on my work computer, I receive the following email 6-7 hours later:

I've lost count of the number of times that I have received this email and have had to reset my password as I'm trying to use Spotify on my phone after my drive back from work.

The email offers no way to way to inform Spotify that this was in fact you but only demands you reset your password. I would have even been willing to pay the extra 5$ (VERY begrudgingly) for Duo thinking that maybe if Spotify thought I had 2 accounts they wouldn't bother me but when I asked Spotify customer support, they stated that the level of my subscription plan would not fix this issue for me.

Justification:

2-Factor Authentication is almost universal and a necessity in today's day and age. Additionally, most applications today allow for some sort of confirmation via the user's email or text asking for confirmation of login or at the very least warning of suspicious activity BEFORE enforcing a pure reset and logout. Implementing either of these solutions would not only supplement the existing account security safeguards but also save me the pain of resetting my password for a 50th time.

Please Spotify I'm begging you. I've had this account for more than a decade, please don't make me switch.  

[ParentalControl]

Progress!

We can now remove the email and password sign in method from our account and strictly use a third-party sign in provider that has two factor authentication setup such as google, Facebook or Apple.

https://support.spotify.com/us/article/login-methods/

Going to log in method you will see the option to trash bin the email and password option removing this junky sign in method.

[313sf6qcao2sqi435fuf]

I support your wonderful idea. I want to add another option, which is to change my email, except by sending a code message to an email that has been verified as changed. 

[313sf6qcao2sqi435fuf]

I have it in my account. Is there anyone who has it? 

[Poliwag25]

I propose the addition of 2-Factor Authentication (2FA) as an optional security feature for Spotify accounts. 2FA has become a standard practice for online security and offers an additional layer of protection for user accounts. In today's digital landscape, ensuring the safety of user data is of utmost importance, and 2FA can help accomplish that.

Here are some key benefits of implementing 2FA:

Enhanced Account Security: 2FA prevents unauthorized access, even if someone obtains a user's password.

User Trust: Offering 2FA as an option demonstrates Spotify's commitment to user privacy and security, building trust and confidence in the platform.

Peace of Mind: Users can enjoy their music without worrying about the security of their accounts.

I believe this is a feature that many users are actively seeking, and it could greatly enhance their Spotify experience. I kindly request that you seriously consider this suggestion.

[harry_rulesall]

I would not like to use my account with facebook/google/apple due to privacy concerns. I would like to keep on using an account which is not shared by third parties as I don't see the need for sharing my spotify usage with them through a paid account.

I also think 2FA is neccessary in 2023 as a basic authentication option.