[All Platforms][Other] 2-Factor Authentication

[ThomasVH]

Spotify should, as a matter of good practice and safety, implement 2-step authentication.

Previously, Spotify enabled the option to log out other sessions other than the current session.

This would prevent hackers from stealing accounts, which would additionaly lead to less account hacks and less work for Spotify employees to assist in these cases.

More info: https://twofactorauth.org

[Pokny]

this is unbelievable this thread was made in 2015 from the looks of it & spotify still really needs to add 2fa this is a must how is a billion dollar company not able to add this.... smh

[user-removed]

I have stopped using Spotify completely because I refuse to give money (through advertising, subscriptions or otherwise) to a company that obviously doesn't care about my security.

It is unfortunate, but it seems that the only way they will implement 2FA is if by not doing so, it affects their profits (users cancelling Premium subscriptions because of no 2FA, etc).

[Wubwubwooble]

"how is a billion dollar company not able to add this...."

The same reason Blizzard says sexual harassment isn't against their TOS.
They're too greedy to care about the people that are giving them money in
the first place, and they're not gonna do anything about it unless people
light a fire under their seats, also just like Blizzard.

[LeifGunnar]

It's shocking that something as big as spotify can't give us 2FA. The idea was first brought up 7 years ago, and STILL nothing.
Makes you wonder if spotify even cares about their users at all...

[dj_si]

I agree with the recent comments about profits and greed - after seven years it's blatantly obvious that Spotify have no intention of improving security because that would mean them spending money (i.e. cutting into profits) paying their tech team to develop, test and implement 2FA, which is something that doesn't benefit Spotify at all, only their users. Their previous comment that 2FA "is currently not a specific legal requirement and Spotify has other appropriate security measures in place in order to protect our user accounts from security threats" is nothing but pure arrogance.

I've worked in the IT industry for decades and have seen this all before - senior management care only about profits and ignore security until there's a major data breach, and they then make generic platitudes along the lines of "We are urgently investigating the data breach and will take steps to prevent it from happening again, but be assured that security of our users' data is our top priority", which of course is utter horse ++++ when they've consistently ignored requests for 2FA for seven years!

Unfortunately, dumping Spotify and switching to a different service will not make a difference regarding this issue, as Spotify clearly don't care.

[user-removed]

It's been 7 years and still no 2FA. I'm done with Spotify.

[zenwu]

Having a 2015 thered running on 2022 and there's no 2FA tells you all you need to know about Spotify, recently lot of my friends who are on an annual plan got their account hacked and lost their money for the plan they paid.

[MalikP_EU]

I am using Apple music like 3rd year but last 2 months i almost every week getting mail 

"

Time’s ticking.
3 months for 5.99 EUR.

"

your spotify :D... i always put the mail to the right place ...trash 😄 .. now i start to think about to create rule...

[jesusjimsa]

Seven years in Under Consideration, congratulations!

Soon we will have the 10 year anniversary party for the first time users asked Spotify to add 2-Factor Authentication. Everybody who has voted for this, every hacker and every Spotify employee will be invited!

[nell]

Last time I posted in this thread was on December 27, 2021 (on page 60 for those who may be curious). My first post was on October 14, 2019 and my problem is both consistent and persistent.

Since my last post five months ago, I've had 73 e-mails to reset my password. I did not request a single e-mail to reset my password, and if I had I would certainly never do so in Russian, German, Portugese, or Finnish.

In the past 12 months, the total number of requests is well above 150. I'm sure the actual number is higher, because I've  likely deleted a few e-mails too from simple exhaustion. The whole thing really is absolutely ridiculous.

So my account is secured only by the safety of my password (which is, of course, as secure as I can make it). In today's digital landscape, a trash heap like Spotify's user account security should be more embarrassing.