[All Platforms][Other] 2-Factor Authentication

[ThomasVH]

Spotify should, as a matter of good practice and safety, implement 2-step authentication.

Previously, Spotify enabled the option to log out other sessions other than the current session.

This would prevent hackers from stealing accounts, which would additionaly lead to less account hacks and less work for Spotify employees to assist in these cases.

More info: https://twofactorauth.org

[AdSR]

Considering the fact that people use credit cards to pay for the service, it is inadmissible how easy it is to lose control of your account. Then the only option not to pay for someone else's use of the account is to block the card. That is disruptive to a person's daily life and can cost extra money.

I hope one day 2FA and better account recovery mechanisms will become required by law for services that use credit card data. Then Spotify will have no other option but to implement 2FA.

[augusto_fortes]

It seems like a joke that after so many years not implementing 2FA

[grahammiddleton]

Is there any update in 2021? Really strange 2FA isn't a thing.

[YSQ]

It's been 6 years bro come on.

[Yahan]

This should not be "under consideration". Security is a real serious issue, there should be a 2FA  in the security options. Please build it in.

[give_us_2fa]

Something so fundamental, "under consideration" for over 6 years. Spotify makes money off of stream farms, they make money off of insecure accounts.

[tombalfoort]

I hope this will be laughed soon. It's almost 2 years ago. 

[tdimdad]

How long does it take for Spotify to implement a security feature which is seen very basic, elementary, these days? Could someone from Spotify (official) explain why such resistance on your side, please? Is it waiting for funding, a massive and embarrassing hack, suitable IT specialists to walk through the door, or what's the obstacle?

[marcmelzer]

It's unacceptable that Spotify still does not support 2FA. My account was taken over by the SAME bad actor twice THIS WEEK. I have no assurance that it's not going to happen again, despite strong passwords and having revoked access to other active sessions. Spotify declared this "Under Consideration" nearly three years ago. It's negligence on Spotify's part to have not deployed 2FA yet.

[stirfryrose]

Why can't this be limited to just a change of password is a Mobile text message pin.  This is the simplest way to do this that A LOT of companies use including Twitter.  So not true 2FA though what we all want to stop accounts getting hacked.