Important Notice About Your Twitch Account

We are writing to let you know that there may have been unauthorized access to some Twitch user account information.

For your protection, we have expired passwords and stream keys and have disconnected accounts from Twitter and YouTube. As a result, you will be prompted to create a new password the next time you attempt to log into your Twitch account.

We also recommend that you change your password at any website where you use the same or a similar password. We will communicate directly with affected users with additional details.

Sincerely, Twitch Staff

Edit: Regarding many questions about password security and the complexity of our password reset flow:

What are your password requirements? The password requirements revolve around algorithmic complexity (entropy), and thus are non-intuitive. The password rating we employ is there to help you create a secure password.

How do I create a secure password? In order to create a secure password, we suggest you use a long random character string with a mix of character types (letters, numbers, symbols). To make it easy to remember, feel free to use words from the dictionary with multiple uncommon string substitutions.

• Bad: Applesauce1! — You’re using different character types, but the majority of the password is a single word from the dictionary

• Okay: ILoveGreenApplesauce — You’re using multiple words and lots of characters, but the words are too common.

• Good: !70v3Gr33n@pple$auce? — You’re using multiple words and lots of characters with uncommon substitutions. Good job.

• Best: Use a reputable password manager with a random password generator.

Edit #2: We’ve heard your concerns about overly-restrictive password requirements, and have reduced them to an 8 character minimum. Best practices regarding password security remain true.