Humble Bundle users are concerned about the site's new redesign, reporting that the game bundle seller no longer allows two-factor authentication and has weak checks for changing personal information such as passwords and email. Owner Ziff Davis laid off a number of Humble's engineers over the summer, leading workers to fear exactly this sort of thing would happen.
Users on the Humble Bundle subreddit first noticed the changes, which include no longer being prompted for a 2FA code or being able to set up the security feature. (Information about 2FA still appears on Humble's support page, and some Reddit users say the feature has since been re-enabled for them.) According to Kotaku, it's also possible for Humble users to change their passwords without having to verify their old one, and that when changing the associated email address, the verification goes to the new address rather than the old one. Both missing features are standard security protocols to prevent someone from gaining unauthorized access to another person's account.
According to updates on the Humble Bundle site, changes also include new checkout options and bundle pages, and login with a passcode instead of a password.
Users have been accusing the new Humble site of being vibe-coded, given its new appearance and the sloppy-feeling rollout of the changes. While there's no proof of that, current and former Ziff Davis workers told Aftermath in June that the company had been increasing its use of AI on the tech side of things, as well as its use of contractors.
These comments came after the company laid off engineers on Humble Bundle and on IGN, including a number of workers who would have been eligible to join the IGN Creators Guild union. Workers told Aftermath at the time that only two engineers remained at Humble Bundle following the layoffs. A member of the Guild's unit council– which had been fighting to expand the Guild beyond editorial workers, a process that was stalled under the Trump administration's changes to the National Labor Relations Board--said that "we don’t know how the IGN website or Humble Bundle will receive updates or fixes going forward."

That question is answered now: badly! Ziff Davis seems to love asking workers to do more with less; in 2025, unionized IGN workers pushed back against their increased workload following yet another round of layoffs. Why exactly companies think having less workers won't lead to an inevitable degradation of their offerings is a logic known only to the brain-poisoned CEOs who love to do this sort of thing, many of whom are convinced that AI can take the place of the experts they once employed to do things like make news outlets or create websites that don't allow any random user to swoop in and steal someone else's credit card information.
Humble Bundle users are recommending others remove their payment information from the site while this all goes down, which seems like good advice.
Aftermath has reached out to Ziff Davis for more information.
