Greetings Authors!
Starting February 19th all Reward Store orders will require you to have a Twitch account with 2FA enabled and will require you to authenticate with your 2FA device when you make an order or transfer points. Due to the preparation of the Twitch authentication migration we wanted to roll this out sooner rather than later so that we can assist any Authors with merging their accounts before we make the switch on 3/1.
Note: If you have already merged your account with a Twitch account and you have 2FA enabled the following will not affect you.
Enabling 2FA on your Twitch Account
In case you are unsure how to enable 2FA on your Twitch account, the Twitch Support team have put together a fantastic page dedicated to it here: https://help.twitch.tv/customer/portal/articles/2186271-two-factor-authentication-with-authy
If you missed the last post, here’s the basic rundown on how to merge your account:
Merging your Twitch Account
If you already have a Twitch account, this is very straight forward - but the same general instructions appy if you do not.
- Log out of your CurseForge account to clear any session/cookie information.
- Log in with your Curse account on www.curseforge.com
- You should be prompted with a screen asking you to merge - select “I have a Twitch Account”
- If you do not have an account, select the other option and you will have the ability to create an account on the spot.
- Once authorized, you should be returned to CurseForge. Grats! You’re done.
If you have any problems during the merge, don’t panic! Submit a ticket to https://support.curse.com and we will help you get your account squared away.
As always, if you have any questions or comments, please let us know below or reach out to us on Twitter (@CurseForge)
Thanks!
Your friendly neighborhood MrFlamegoat
it keeps telling me "Curseforge ops, your 2FA token seems to be invalid, please try again!" when trying to redeem a gift card.
I know the token is just fine as it works with all my other twitch things.
I have set up MFA with Twitch but I never get a text when it asks me "Please enter your Twitch 2FA Token:" on redemption.
In reply to scotepi:
It no longer sends a text, to get the code for that prompt you launch the Authy app and click on Twitch.
Well I've been locked out of my points.
I've merged my Twitch and Curse accounts, and have setup 2FA.
I get the SMS from Twitch just fine, but I don't get one when I try to spend my points.
You need to revert this until such time that Twitch no longer requires a phone number for 2FA, either that or whitelist accounts to allow them to use the store without 2FA. You've locked me out of the store.
I guess this is also the time for you to get someone at Twitch to update their insane 2FA to something sensible.
Like regular old TOTP/HOTP with a scannable QR code, which everyone under the sun supports.
SMS are insecure.
Authy is proprietary. And requires sharing a phone number with Authy on top.
It's not that hard.
Also pointed this out already in replies to your tweet regarding this news post:
https://twitter.com/CurseForge/status/963822622143401984
You should throw, like, a 1000 votes onto these here, maybe they'll get the hint?
https://twitch.uservoice.com/forums/297558-general/suggestions/15947032-two-factor-authentication-allow-us-to-use-google
https://twitch.uservoice.com/forums/310228-account-management-e-g-login-connections-pass/suggestions/11498085-google-authentication-for-2-factor-authentication
https://twitch.uservoice.com/forums/297558-general/suggestions/14373747-please-support-rfc-6238
https://twitch.uservoice.com/forums/297558-general/suggestions/12287061-open-standard-2fa-with-qr-codes
https://twitch.uservoice.com/search?filter=ideas&query=2fa