Spotify started using rotating QR codes to stop users from sharing Family plans outside their households. Members must scan the code in person within seven days or face a 12-month restriction. However, many users found a workaround by using live video calls to scan the code from different locations.
Serving tech enthusiasts for over 25 years.
TechSpot means tech analysis and advice you can trust.
Facepalm: Like many companies that offer family plans, Spotify isn't afraid to go the extra mile to ensure members really do live in the same household. The latest trick requires users to scan a QR code that appears on the plan manager's phone. And to stop them from simply sending someone a screenshot, the code changes every few seconds - but there already appears to be a workaround.
Spotify revealed the new family plan verification process on an updated support page. The streaming service may ask some Premium Family members to verify that they live with the person managing their plan, using a QR code check that requires both people to be in the same place.
The plan manager can find the code by tapping their profile picture in the Spotify app, selecting "Your Premium," and then opening "Manage." The member then scans it using their phone's camera. Spotify says the process is only available through its mobile app, and everyone involved needs the latest version installed.
Once notified, members have seven days to complete the QR check. Missing that window or being unable to complete verification carries a lengthy restriction: members won't be able to join a different Family or Duo plan for 12 months. They can still sign up for another Premium plan, but switching to someone else's Family or Duo subscription won't be an option during that period.
Many people share family plans with relatives or friends who aren't in the same household, breaking the terms and conditions. The obvious workaround here would be to simply send the member a screenshot of the QR code, but Spotify warns users to scan it in person because it changes every few seconds.
The rotation might not be enough to stop determined subscribers, though. A live video call or screen share could allow someone to scan the code before it refreshes, even if the plan manager is elsewhere. One Reddit user says they already tried this method and it works, but Spotify could introduce additional measures such as IP/VPN checks.
Other streaming services already use behind-the-scenes checks to enforce household restrictions. Netflix looks at IP addresses, device IDs, and account activity, while Disney+ checks whether devices regularly connect through the same home internet connection. Both say they don't use precise location tracking to establish a household. Those methods look for patterns over time, which could make them harder to satisfy with a one-off verification trick.