Site name
GameBanana
Site URL
https://gamebanana.com
Update reason
The methods of 2FA that it supports have changed.
Additional information
GameBanana's 2FA system is very confusing.
GameBanana supports both TOTP and Email 2FA.
When TOTP is enabled, TOTP is only invoked on logins from unknown devices.
Email 2FA can be enabled, but only for either logins from blacklisted IPs OR after 6 months of inactivity OR both.
When Email 2FA is invoked, it overrides TOTP even if you are logging in from an unknown device. You are not asked for TOTP. It will only email you a login link.
If you are logging in using Email OTP instead of username/password, then Email 2FA is completely nullified. Logging in via Email OTP can be permitted, mandated, or blocked in account settings, independent of your Email 2FA settings.
Issue Eligibility
Site name
GameBanana
Site URL
https://gamebanana.com
Update reason
The methods of 2FA that it supports have changed.
Additional information
GameBanana's 2FA system is very confusing.
GameBanana supports both TOTP and Email 2FA.
When TOTP is enabled, TOTP is only invoked on logins from unknown devices.
Email 2FA can be enabled, but only for either logins from blacklisted IPs OR after 6 months of inactivity OR both.
When Email 2FA is invoked, it overrides TOTP even if you are logging in from an unknown device. You are not asked for TOTP. It will only email you a login link.
If you are logging in using Email OTP instead of username/password, then Email 2FA is completely nullified. Logging in via Email OTP can be permitted, mandated, or blocked in account settings, independent of your Email 2FA settings.
Issue Eligibility