Streaming services have always tried to walk the line between getting as many people as they can to use their services and not necessarily encouraging password sharing. One of the things that makes movie, TV and music streaming so convenient is the ability to use the services on your devices where ever you may be. I pay for the premium service! How does confirming my location confirm who my family members are!? Fix it /NrRXEVRPkS While the company hasn’t confirmed that, it appears the messages are the company’s attempt to crack down on people who are not family members using the same Why do you keep asking me to confirm my GPS location? This is the 5 email in the last 2-3 weeks. In recent days, people on social media have posted about notifications they’ve received from Spotify asking them to disclose their GPS coordinates. So this is a real problem and you shouldn't contribute to it.We hear it’s quite common for people who subscribe to streaming music services to share passwords with friends and family. Music streaming service Spotify wants to make sure you share your login only with the latter - and only with those who live in the same physical household. When I changed my password and revoked various app permissions, the problem went away. Audio that I'd never heard of, nor ever played myself. For months, I was waking up in the morning to strange meditation audio playing in Spotify. It's likely that my admittedly weak password was included in one of the many dumps of decrypted passwords that get thrown around on the web these days. I've already, somehow, had my Spotify access token and/or password leaked by an application. And when you accidentally end up storing those passwords with a low or non-existent level of encryption, and your server gets hacked and everybody's Spotify password ends up on a hacking forum, people very much do mind. But inevitably it's not just for you, when you want other people to use it and provide their passwords directly to your application. It's tempting to say, 'well, nobody will really mind if it's just for you'.

Attempting to get around this requirement in any way completely nullifies the trust aspect of OAuth. You should complete the user login flow on a device with a web browser, and then securely store the access and refresh tokens on your headless server/process. Every time this question comes up, the answer is the same.

Login without password spotify