Twitch LEAK and 2FA passwords: How to enable two-factor authentication after alleged hack

Streaming platform Twitch has reportedly suffered a massive data breach.

According to the latest reports, the Twitch streaming platform was hacked earlier this week.

It’s believed the entire site has been compromised, including source code and comments dating back to the early days of Twitch.

There are worrying allegations that encrypted passwords may also have been leaked.

If the rumours are true, then it’s worth updating your Twitch passwords and enabling two-factor authentication (2FA).

Two-factor authentication gives users an extra layer of security, requiring the use of a one-time passcode sent to phones.

Twitch explains more: “Twitch offers two-factor authentication (2FA) to protect your account from unauthorised logins.

“Two-Factor Authentication (2FA) means two different methods of verification will be required to log in to your Twitch account: your password and your mobile phone.

“If your password is compromised, your account will be inaccessible without the unique code sent to your phone.”

If you want to set up 2FA on Twitch, then check out the guide below for more information.

Setting up Two-Factor Authentication (2FA)…

• To begin set-up of Two-Factor Authentication the email tied to your Twitch account must be verified.

 – Once your account is verified and you’re ready to set-up 2FA head to your Security and Privacy settings page. From there, follow these steps:

• Select Set Up Two-Factor Authentication

• Select Enable 2FA

• Enter your phone number (we do not recommend using VOIP numbers) and select Continue

• Enter the 7 digit verification code you receive via text message and select Continue

• If you have a preferred authentication app you can now scan the QR code displayed using your phone camera. If you’re enabling Two-Factor Authentication on the Twitch mobile app you will need to use SMS.

• If you do not have an authentication app you will need to download one from your phones respective app store. You may also opt to use SMS as an authenticator if you are unable to use an authenticator app.

According to the report, the same Twitch leak includes information on mobile, desktop and console clients.

That’s on top of information for other platforms owned by Twitch, as well as other tools.

The massive data breach also includes Creator payouts, showing how much users get paid for their streams.

At the time of writing, the Twitch Support page is yet to acknowledge the breach, although a report on VGC claims the company is aware of the issue.