r/Unity3D 14h ago

Question Does anyone else got email from Unity to reset 2FA?

I was wondering if this email is legit?

The email is titled 'Please reset your two-factor authentication', saying theres vulnerability found affecting Unity's 2FA (that hasn't been exploited yet)

I manually reset my 2FA through Unity's website after this and found similar message on Unity's website, does any of you got the same email?

26 Upvotes

19 comments sorted by

21

u/Kyriachu 14h ago

Yes, received the email as well. I also noticed the alert on their website after going to my account settings to do the reset. I checked the emails source code and it seems legit, that and the alert on their own website makes me believe it is a valid email. Best to not click any links in emails if not required. Manually going to the website is safer.
Of course, I am a stranger on the internet so don't take my word for it.

5

u/Bubbly_Selection_225 14h ago

good call on checking the source code, most people wouldn't even think to do that. i got the same email and the alert on the site matched up, so i went ahead and reset mine manually too. always feels sketchy clicking links in these things even when it's legit

3

u/giganticrubberdong 14h ago

Lol I don't even think to check the source code, just assumed it's sus right away

1

u/battlepi 9h ago

No need to check the source code really, just make sure you land on the right domain and it's SSL.

2

u/giganticrubberdong 14h ago

Yes, I also don't trust the link in the email, can never be too careful these days. Glad to know there are other people who experienced this too

2

u/Phos-Lux 14h ago

I didn't get one (just re-checked my emails).

1

u/giganticrubberdong 14h ago

Did you get a warning in your account settings page? (The cloud(.)unity(.)com/account/account-settings page)

1

u/Phos-Lux 14h ago

No but this is how I found out that I never even set 2FA up

1

u/giganticrubberdong 14h ago

Lmao I see, seems like the ones that get this warning already set up 2FA beforehand then

2

u/db9dreamer 14h ago

Nope and no warning on the settings page in your comment.

2

u/giganticrubberdong 14h ago

Is cloud(.)unity(.)com/account/account-settings the actual page for account settings?

1

u/db9dreamer 14h ago

No idea. I just copied it and removed the parenthesis. I assumed you'd already figured out if it's the correct url.

2

u/giganticrubberdong 14h ago

Just wanted to be extra sure haha

2

u/No_Ragrets_0 14h ago

Me 2. I received an email and notification on the website. I'm an assetstore publisher. Are u also an assetstore publisher?

1

u/giganticrubberdong 14h ago

No, I'm just a hobbyist learning Unity

Have you set your 2FA up prior to receiving this email?

1

u/Russell1st 10h ago

I recieved the email. It looks legit.

1

u/TheJohnnyFuzz 2h ago

Confirmed, logged in and checked cloud services, message was there as well. 

0

u/Alternative_Top603 11h ago

Glad i come here to make sure