Currently when you get an email with a one time code from Roblox for account auth, the code will be included in the subject. This is insecure since on mobile devices the email subject and first bit of text content will be shown on lock screen notifications without requiring the device to be unlocked. The code should be formatted in a way that it’s not possible to see it in notifications on mobile devices.
17 Likes