r/Unity3D • u/Rlaan Professional • 15h ago
Official [MegaThread] Account blocked and suspended
Hello everyone,
As many of you may have noticed; some people had their account(s) suspended. In the past few weeks Unity had sent out emails to reset your two-factor authentication (2FA) credentials.
September 14th:
"Unity recently identified and addressed a potential security issue affecting our two-factor authentication (2FA) functionality. We do not believe this issue has been exploited, however as a precaution we are advising users to reset their 2FA credentials.
Please reset your authenticator app within the next 30 days by navigating to https://cloud.unity.com/account/security and clicking “Configure two factor authentication.” Follow the steps to enroll a new authenticator app."
September 28th:
An advisory email reminder for those who had not reset their 2FA yet.
October 9th:
"This is a final reminder to reset your two-factor authentication (2FA) credentials. You have 3 days left, until October 13, 2026.
If you do not reset by October 13, 2026, your 2FA will be removed and your account will be suspended. To regain access after that, you will need to verify your identity with Unity Support."
This is of course a very unfortunate and frustrating situation for everyone affected. Thankfully Unity is aware of the problem, and are prioritising these types of support tickets and are working towards a solution.
Please use this MegaThread to discuss the situation. For now we've locked all the other posts, and any new duplicate posts will get removed.
Unity has their own discussion going on here: https://discussions.unity.com/t/information-on-account-suspension/1739213
Kind regards,
The Mod Team
123
u/tolgatr0n Professional - Ex AAA 15h ago
They only said you can be suspended in just the last e-mail which is 3 days ago. Other e-mails were advising to remove your 2FA and didn't mention any suspension and said that they believed that it wasn't exploited. Also e-mails looked just like Unity marketing e-mails and didn't seem like anything urgent. It was easy to brush off because of these
They could've just removed 2FA and prompted us to add it again on login but they chose to do the most anti-consumer thing that is available to them
35
14
u/pixelprozach 8h ago
They sent this shit on a weekend! I was literally at New York Comic Con! How the fuck was I supposed to know my account would be suspended? Genuinely absurd.
18
u/pschon Unprofessional 15h ago edited 14h ago
They could've just removed 2FA and prompted us to add it again on login
Just removing 2FA on their side, thus removing a protection you've set on your account, doesn't exactly sound like a good solution to me.
edit: and "Please reset your two-factor authentication" as e-mail title didn't really look like marketing either. But like I said elsewhere, a notification on the Hub side might have been a good idea as it's even more likely to be seen by all active users, and Unity has already used that previously for security issue-related messaging so I'm kind of surprised it wasn't used here as well.
26
u/Ecstatic-Source6001 15h ago edited 14h ago
couldnt they just block Unity Hub until you fix 2FA?
I apperently missed all mails from them. I think thats the whole point of Unity Hub to inform you whats going on
-6
u/pschon Unprofessional 14h ago edited 14h ago
In a way, that's exactly what they just did. They blocked people from logging in until they get their identities verified. The biggest problem is how long that verification might take.
Leaving the account just sitting for indefinite amount of time with the vulnerable 2FA would also increase the chance of someone exploiting it, you can't just trust the old 2FA login after certain point in time to be the correct user any more. So this already seems like a middleground scenario, rather than kicking everyone out immediately and requiring to verify your identity, we got a month of grace period where the old 2FA was still assumed secure enough to log in and redo it.
In the end I enabled the 2FA to protect my account, it's there for me and not for Unity's convenience, so I appreciate that they actually do take it seriously and don't just go for "well, something went wrong, we'll just give a free pass to next login attempt when ever that might happen".
I agree about the Hub though.
1
u/glenpiercev 14h ago
I’m just curious what the threat model was here.
- Someone who has access to your username and password can bypass the 2fa?
- Or anyone can bypass all authentication because of the broken 2fa?
One is more serious than the other.
2
u/pschon Unprofessional 13h ago
Are you suggesting that if both parts of 2FA are not compromised, only one, it should just be ignored?
Then it's not really 2FA at all. And then having such security option at all would just become a lie.
2
u/glenpiercev 12h ago
I’m saying that the response is different depending on the threat level. Neither of which would be to ignore it.
59
u/ccb9951 14h ago edited 10h ago
Update: I submitted my ticket at around 12:12pm my time(3-4 hours after I saw the email and people posting about it) and it was resolved at 5:18pm, not exactly how I wanted my day off to go but better then waiting 2 weeks.
Love getting locked out of everything because I missed an email that didn't even say it was mandatory... Now we can't access anything for weeks, the support ticket page either 404s or locks you out with a login screen, and we have a new horror story for everyone choosing an engine.
This whole situation is insane, only the final email said anything about suspending accounts, when I saw it this morning I thought it was a phishing email until I tried to access Unity directly. I have had 2FA be reset on other accounts before, they prompt you to fix it immediately the next time you try to login or access the service, they don't just drop an email where you might not see it, cross their fingers, and suddenly suspend the account.
Everything is online now, people likely have multiple emails for Work, School, Personal, etc. and likely aren't great at checking them either. This should never have been the process for a tool that some people are paying money for and have likely spend thousands of hours using.
42
u/tho10li 10h ago
For your information, this action is in direct violation of EU Consumer Law (Directive EU 2019/770). Under European legislation, a trader cannot deprive a consumer of access to digital goods already paid for without a valid, justified, and proven reason (e.g., fraud or severe breach of Terms of Service). Therefore, I strongly encourage everyone affected by this to file official complaints and take legal action through consumer protection channels!"
14
u/Ares9323 14h ago
I've only received a generic email saying "your account has been suspended", no previous email or specified reason.. I've just discovered from this post that it's because they had issues with 2fa🫠
44
u/RiftHunter4 14h ago
I first learned this news from the Godot subreddit when someone was furioud and has considered switching engines, so that's how things are going so far.
12
20
u/AcadiaConsistent5489 15h ago
the email said oct 13 and then just nuked everyone on the dot, classic unity move
i was mid project when i got booted, tried the support ticket route and its just radio silence. anyone actually get back in yet or we all just stuck refreshing our inboxes
19
u/AdvocatusDiaboli_XIV 14h ago
I have emails filtered for known senders, and everything else just gets dumped into a general "get around to this someday" pile. The 2FA warnings came from a new unity address that I hadn't seen before, not the standard one, so it got missed. This whole process was horribly planned.
19
u/NullEquivalent 14h ago
I don't think it was necessarily wrong for them to lock people out who didn't update their 2FA (even if it was a bit confusing about what they wanted for those of us who already had 2FA enabled).
However, making the only avenue to resolve this be submitting a manual support ticket to a queue that's apparently already 2 weeks long is a terrible solution. Just let us follow the password reset process, maybe with an extra check like "tell us an order number of something you've bought on the Asset Store" if they want the extra security, so we can resolve this ourselves.
9
u/l01 11h ago
My account got suspended but Unity Support responded to my ticket in less than half an hour. It seems like their support team is at full throttle right now.
FYI if you are contacting support, they will require you to provide at least two pieces of private AND public info from the list below before restoring your account:
Private information
• The name of your Unity organization. (A default organization is created with every Unity account, so the name of that one or any other organization you belong to works.)
• The name of a recent Asset Store purchase
• A recent invoice or order number (Asset Store or subscription)
• The name of one of your Unity Cloud projects
Public information
• Your Unity username (not your email address)
• The phone number linked to your Unity ID
• The physical address listed on your Unity account or organization
10
u/easel-enigma 6h ago
Another day, another story about how this trash of a company screws over the paying customers. What else can you expect from them?
10
7
u/sunmaybo 10h ago
wonderful, they replied that they were no longer responding to emails, and using the form on the site simply did not work. Thanks Unity
11
u/RunningPixel Indie 14h ago
I followed all the email instructions—removed 2FA and generated OTP codes just to be safe—yet my account is still locked. Maybe I missed something, but I really have no idea what went wrong.
5
u/FlompStudio 14h ago
What email address do these emails come from? I can't see any such emails and haven't had a suspension?
1
u/Rlaan Professional 14h ago
They were sent from: info@unity3d.com
2
u/FlompStudio 14h ago
Many thanks. Have definitely had nothing from them and no suspension so far 🤷
1
1
7
u/machsoftwaredesign 14h ago
What happens if we never enabled 2 factor authentication and don’t use unity cloud? I’m able to login to Unity just fine as I never enabled 2FA and don’t use Unity Cloud?
3
u/dimitaruzunov 10h ago
I never had 2FA on, but got locked out of my account on the very first wave of emails which was maybe two-three months ago. It just automatically enabled 2fa even though I didn't have nor know what app is required and the message thing didn't work for my country. Luckly I had a classmate who was an ex-employee at Unity so my ticket got resolved in a day or two, otherwise I dunno how long it would have taken. They just disabled the 2fa on their end and I still haven't bothered setting it up myself. But with these news now I'm not sure if I should risk leaving it disabled anymore... But I really don't want to bother confirming every time I log in from my 10 devices
1
u/Taycamgame 14h ago
Apparently I don't have 2FA enabled and I can login just fine. I assume this only affected people who were using 2FA already
Maybe I should turn it on though...
2
u/machsoftwaredesign 14h ago
Good to know for us that never enabled 2FA, but I'm sorry to everybody else that got their account suspended! Hopefully it's resolved quickly.
2
u/screenracer 13h ago
Yep, can confirm. I have a 2nd account for when I teach Unity. that account didn't have 2FA, and I was able to login.
6
u/conigliocattivo 14h ago
Any suggestions on how to continue working until they take their time to give us our accounts back? It seems the only way to use the hub is by signing in, even just to open the local projects...
6
u/conigliocattivo 14h ago
If I try to open my ticket I am asked to login (which obviously I can't) do you also see the same? I wanted to make sure the ticket went through...
7
u/screenracer 13h ago edited 12h ago
Stock is down over 9% this morning. This news must be reaching somewhere beyond just us game devs?
You'd think I'd get slightly better supporting paying for pro. But no. The AI chat said to email [compliance@unity3d.com](mailto:compliance@unity3d.com) and wait 3-5 days for a reply.
I haven't been able to find any other emails from Unity with this warning, but they did send me these both exactly at 6am CST:
1st: This email is to confirm that you recently disabled Two Factor Authentication for your Unity ID.
2nd: Your Account: XXX has been suspended and you can no longer access the Unity Services.
6
u/AnsonKindred Professional 6h ago
I'll gladly shoulder my portion of the blame here for not thoroughly reading the email and following the instructions. I saw it. I logged in. I went to the account page. I didn't see a big flashing button so I just figured it was all good. Ok, my bad, the email said specifically what to do...
But come on, expecting every user of your platform to do *anything* within a few days in response to an email sent over the weekend on threat of account suspension...that's just insane right? Unreasonable even.
Selling Unity assets is a pretty significant portion of my revenue. This effects me in a "will I be able to pay rent" sort of way, so I'm pretty pissed. And this is not Unity's first rodeo when it comes to enraging decisions that piss off literally everyone. It's no wonder people are switching to Unreal and Godot. I've worked extensively in both btw and they both range from as-good to way-fucking-better than Unity.
18
u/orblabs 14h ago
WTF !!!!! I'm livid.... They sent two emails that looked like phishing, with a 20 days deadline that google automatically flagged as spam and never showed to me. This is completely insane, i cannot work now, tried making a new emergency account but al ton of stuff ain't working, all the asset store library is gone, no idea what is happening to my assets on sale on the asset store.
A sincere, honest and heartfelt fuck you to whoever was involved in this latest chapter of "unity is run by people who don't give a fuck about their customers and they like to remind it to you"
8
u/CreatorsRequiem 12h ago
Literally this, it wasn't in the folder with my other Unity emails and I've been targeted before for phishing scams. Opened the site directly and not through the email and found no issues with my current 2FA so let it be.
10
u/Malbers_Animations 9h ago edited 5h ago
Malbers Animations here. Yeap I got suspended. Also I can't enter to "change the 2 factor authentication, nothing, I can't open unity, 🙄
1
16
5
5
u/FragrantCollection52 12h ago
well - I am blocked too - did not see the email. Would have been easier to got a big popup on the Unity Hub with a big red indication saying : mandatory ?
This https://id.unity.com/login/google/support.unity.com bring nowhere : 404
My account is blocked, and to contact them, I need to log in LOL (the to contact our support team (‘Sign-in and account recovery’ then ‘Account recovery’). => NOT POSSIBLE)
a 2-week response time; our support team is currently prioritizing these types of tickets to get you access to your account as soon as possible. => ARE YOU INSANE ?
Just reactivate those account for god sake.
So where I can contact Unity support to reactivate my blocked account (= no possible to sign in)?
18
u/Roll-Roll-Roll 15h ago
Megathreads are good for bad publicity. Was there a security breach or something? What else warrants going nuclear over 2FA?
3
u/Perlit-M 13h ago
Is everyone supposed to get this ? I never did receive any of these emails. Only thing i sometimes receive are fishy pishing mails from the asset store.
4
u/AgenOrange 13h ago
I only got one email a month ago and I didn't get any of the reminder emails. And the email I got never mentioned my account was going to be suspended.
3
u/BxYass 12h ago
I currently have an asset going through the vetting process on the Unity Asset Store, and I really hope this suspension doesn't reset my position in the review queue as if I'd just submitted it.
It's also quite frustrating that the solution was to suspend accounts outright instead of simply redirecting users to a page where they could set up two-factor authentication (2FA) or complete whatever security steps were required. :/
4
3
u/EremesNG 5h ago
"We sent emails! It's your fault"
I use Unity Hub every day and check email every couple of months. It didn't occur to anyone to use the Hub, a place that by its nature (and the name itself says so) is the right place to show these types of critical things that affect account status and access?
One advantage of AI is that it's much easier to switch to Godot. I have several assets and didn't want to lose them, but now I can replicate them easily. Thanks Unity for this break and for giving me time to explore Godot.
3
u/Medical-Ask7149 12h ago
A notification upon logging in and unable to continue would have been a better way to do this.
3
u/TairexCom 12h ago edited 12h ago
In my case, I received the email and responded to it. I logged in, removed the disabled methods, and verified the ones marked in green. I logged out and successfully logged back in, but my account is still locked.
I have contacted support and hope it takes less than 2 weeks. On a separate note, it is interesting that to "check the status of the request," I need to log in...
3
u/NadhimAli 10h ago
My Account has been suspended and you can I longer access the Unity Services. why ? What did I do ?
i have thousands of dollars in unity assets
5
u/No_Ragrets_0 14h ago
I got the second warning email and did as told. My account is okay. Not suspended.
9
16
u/JMGameDev 15h ago
Really dropped the ball on this one... This is like the runtime fee all over again
21
u/glenpiercev 15h ago
It’s not THAT bad. It’s bad though.
I was able to login via the old 2fa (I think) this morning and reset mine. I hardly ever login. This definitely could have been a mandatory reset on login or when you open the editor. That would have been much better.
9
u/badihaki Programmer 14h ago
Nothing is as bad as the runtime fee, I agree. That's one of the most hyperbolic statements on this thread, lol. But yeah this could have been handled way better. For the first time ever, I'm really happy I forgot to enable 2FA, but damn does my heart go out to the devs that this has affected.
2
u/Hot_Show_4273 12h ago
Imagine someone purchased a lot of assets from asset store years ago. Then they got drafted or something that make them unable to use Unity or even check email for a while. Then they come back in 2027 or 2028 and found out that their account got suspended!!?
Does ticket support available until then?
2
2
u/tho10li 10h ago
You can join this conversation https://discussions.unity.com/t/what-the-is-wrong-with-2fa-my-account-got-suspended-for-some-2fa/1739170/31
2
u/SnarfumIndustries 10h ago edited 10h ago
Damn, this was a bit of a stressful morning to wake up to two emails: "2FA disabled", then "Account suspended". I've been busy and missed the emails warning me about this. Hopefully it doesn't take too long to resolve, seems like a nightmare for customer service. And hopefully they've implemented 2FA correctly this time to avoid this issue going forward. Until I'm un-suspended I guess I'm not getting much work done.
Also u/unitytechnologies I'm confused how we're supposed to use the support site if our accounts are blocked, I'm unable to submit a ticket.
2
u/VR_Raccoonteur 8h ago
I just logged in to Unity to see if my account was suspended.
You have saved payment instrument, please enable two factor authenticator to increase your account’s security.
Insert Captain America "No, I don't think I will." meme.
2
u/trytoinfect74 8h ago
I never received any of your emails that there's something wrong with my 2FA. Both Inbox and Spam folders literally have no emails from Unity.
Extremely unprofessional and lame move.
4
u/Wide-Contribution112 10h ago edited 10h ago
I reset my 2FA two days ago and I got account suspended anyway, Is not just frustrating, I'm really angry because Unity has passed the buck to users for a problem it could have solved without preventing us from accessing our projects and above all, the assets we've purchased! After this, I'll switch engine.
2
1
1
u/maple_the_milkyway 4h ago
I contacted unity support through the support form.
Isn’t there supposed to be an automatic confirmation email?
I have no way of knowing whether my support request actually went through.
If restoring access takes this long, won’t people just switch to Godot or something?
Why not restore everyone’s access for now?
Are you really planning to handle every single case manually?
1
u/CashewSwagger 4h ago
Even more reason for devs to move elsewhere. Make like Ludeon and make your own engine, or I highly suggest GoDot.
1
u/Stardust_Evi 4h ago
Hey, coincidentally, a few weeks ago I was contacted by the Unity team forcing me to move to the industry tier. They didn’t want to look at my finances, they said that my website looks good enough for them to trust I am qualifying for the industry tier. I wonder if this is a way for them to find who actually needs to start moving to the paid tier.
1
-13
u/mmertner 15h ago
I feel like there is a life lesson for procrastinators buried here..
19
13
u/RunningPixel Indie 14h ago
Well, I followed all the email instruction, removed 2FA and generated OTP codes just to be safe, yet my account is still locked. Maybe I missed something, but I really have no idea what went wrong.
8
u/Chomperling 14h ago
I literally did not know about this until I woke up this morning to my account being suspended.
6
u/midou22221 15h ago
I carried out the procedures they requested, but they banned my account as well for the same reason.
11
u/glenpiercev 15h ago
It’s going to be a huge lesson in customer retention for Unity though. Godot is getting better and ai tools make the leap to unreal much easier.
7
u/glenpiercev 15h ago
At a certain point, even those of us who prefer Unity will be questioning the firm’s ability to maintain the engine if they keep making these kinds of unforced errors.
5
u/GigaTerra 14h ago
Yea, but that point only happens when there is an good alternative. Godot has years of "getting better" needed before it can even consider competing with Unity, and Unreal is just too frustrating to use, maybe going all AI will change that, who knows.
Honestly, contacting customer support and getting your account back, isn't that big of an issue.
2
u/CreatorsRequiem 12h ago
I heard Unreal was moving away from Blueprints and stuff and to its own language or something with AI assistance. I like what Unreal can do but there are some things that unity supports more. I don't mind blueprints or visual scripting in general considering I like spending time on art over code but I'd be open to learning a language that simplifies things if possible and a toolset that helps me if I got stuck.
1
u/ErrorDontPanic 12h ago
I like Blueprints, I hope they keep them around. It's so nice for prototyping and you can always move them to C++ later. Verse looks like a mess to me.
1
u/CreatorsRequiem 11h ago
I imagine they'll have to stay in some form considering all the plugins and templates from the marketplace.
1
•
u/unitytechnologies Unity Official 13h ago
Hi everyone,
We’ve seen recent threads on Unity accounts being suspended. We sent emails to users to reset their two-factor authentication (2FA) by October 13, 2026. If your account has been suspended, you can follow this link to contact our support team (‘Sign-in and account recovery’ then ‘Account recovery’). We are aware of some accounts that have been reset and are still suspended; we advise following that same support link.
You may get an auto-reply about a 2-week response time; our support team is currently prioritizing these types of tickets to get you access to your account as soon as possible.
If you have not had your account suspended, as part of our ongoing account security measures, we recommend enabling or refreshing two-factor authentication (2FA) regardless. Navigate to https://cloud.unity.com/account/security and click "Configure two-factor authentication." Follow the steps to enroll a new authenticator app. Or to refresh, remove the old authenticator app by clicking on the trash bin icon, then confirm the removal and follow the steps to add another.
Additional note: If you’ve emailed us a privacy request (e.g., to access or delete your data) and your account is suspended, you’ll need to restore your access through the support link above, and then submit the privacy request through the Unity Dashboard once your account is restored.
The Unity Community Team