Spotify has started introducing 2FA support, but it's pretty unusable at the moment

Spotify has historically lacked multi-factor authentication (MFA), a crucial security feature that mitigates account usurpation through stolen credentials. Recently, multiple Reddit users (here and here) reported being prompted to enter a 2FA code when logging into their Spotify accounts. This development is a positive step towards enhanced security on the platform and addresses a long-standing user request.

However, the implementation appears inconsistent and incomplete. Not all users are receiving the 2FA prompt, and there is no option within the Spotify settings menu to enable or disable the feature. Additionally, the system does not always require a 2FA code for every login attempt. The current setup restricts users to receiving 2FA codes via email, with no support for third-party authentication apps.

Interestingly, Spotify already provides a robust 2FA solution for artists, including support for third-party apps and SMS verification. Extending similar support to regular users should be feasible for the platform.