Reddit Now Requires Login on Old Reddit — And the Reason Should Worry Automation Users
- On June 30, 2026 Reddit said it would start requiring everyone to log in to use old.reddit.com, rolling out over the following month.
- The stated reason is anti-scraping: Reddit called old Reddit's logged-out experience "a significant source of abusive scraping and automated traffic."
- This follows the May 28, 2026 deprecation of unauthenticated .json access, where anonymous requests began returning 403 within days and with no grace period.
- The strategic read: Reddit wants an account ID attached to every request. Anonymous access is closing; identity-based access is what remains.
You open a Reddit thread from a search result on your phone, in a private tab, the way you have a thousand times. Instead of the thread, you get a login wall.
If that thread was on old.reddit.com, this is not a bug and not an A/B test. It is policy, and the reason Reddit gave for it tells you more about the next two years than the change itself does.
What actually changed, and what did not
On June 30, 2026, a Reddit employee posted in r/modnews that "over the next month we will start requiring everyone to log in" to use old.reddit.com. The rollout was gradual rather than a hard cutover.
The scope, as stated at the time:
- Affected: old.reddit.com, the legacy interface, in its logged-out state.
- Not affected (as stated): logged-out browsing on reddit.com itself.
- Already gone: unauthenticated .json access, deprecated on May 28, 2026. Anonymous requests began returning 403 Forbidden within days, with no grace period.
There have since been reports that the main site is testing a login requirement too, but that is a single-source report and should be treated as unconfirmed, not as a live change.
The reason is the actual news
Reddit did not frame this as a growth play or an engagement funnel. It framed it as enforcement. In the company's own words, old Reddit's logged-out experience is:
a significant source of abusive scraping and automated traffic on the platform.
And the mechanism they described for fixing it is the part worth underlining: requiring login attaches an account ID to every request, which makes detection and enforcement tractable in a way that IP-level blocking never was.
Read that next to what Reddit already does behind the login wall — timing patterns, interaction rhythm, cross-account behavioral signals — and a coherent picture appears. We wrote about that side separately in Reddit reads your typing rhythm. The login wall and the behavioral fingerprinting are two ends of the same strategy: make every request identifiable, then judge the identity.

What this breaks, in order of severity
- Anything built on anonymous reads. Monitoring scripts, keyword alerts, competitor trackers, and research tools that hit old Reddit or the old .json endpoints without credentials are structurally broken, not temporarily degraded. There is no header trick that fixes a policy.
- The "burner reading account" pattern. Plenty of people browsed logged out precisely so their reading was not attached to their posting account. That option is narrowing.
- The economics of scale. When every read costs you an account, breadth gets expensive — and each account you spin up is another thing that can be linked to the others.
That last point is the one that catches multi-account operators. The instinct when a login wall appears is to make more accounts. But Reddit's whole reason for the wall is that it wants to evaluate accounts, and accounts created in a batch, from one environment, behaving identically, are the easiest thing in the world to cluster. We covered how that clustering actually plays out in running multiple Reddit accounts in 2026.
What still works
The honest framing is that Reddit is not closing down; it is repricing access from "free and anonymous" to "cheap but attributable." Things that survive that repricing:
- Official API access with proper credentials, within its documented rate limits. Whatever you think of the pricing history, it is the sanctioned door.
- A small number of real, aged, differentiated accounts that participate in ways a moderator would recognize as participation.
- Reading as yourself. Unglamorous, but it is now the default cost of entry.
What does not survive is volume without identity. If your Reddit strategy assumed anonymity as a free input, the input just got priced. Our field notes on what does and does not survive moderation are in Reddit automation: 2 bans, 5 survived.

The wider pattern
Reddit is not alone here, and that is why this matters beyond one platform. Across 2026, the direction on every major platform has been the same: move the unit of judgment from the individual request or post up to the account. TikTok is testing detection aimed at accounts dedicated to posting AI-generated spam rather than at individual videos. Instagram evaluates originality across a rolling window at the account level. Reddit is closing anonymous reads so that requests map to accounts.
None of those three companies talked to each other. They arrived at the same place because it is cheaper. Judging content one item at a time is a losing race against generation speed. Judging accounts is a race you can win once and keep winning.
The practical consequence for anyone operating more than one account: the thing that keeps you alive is no longer clever evasion at the request level, it is that each account is genuinely a separate participant — its own environment, its own posting rhythm, its own subject matter. That is the design principle behind tools like NoobClaw, which run each account in its own local browser profile with its own login session and generate different content per account rather than syndicating one post everywhere. What no tool can do is supply the participation itself — and on Reddit specifically, that has always been the part that decides whether an account lasts.
The three-month checklist
If Reddit is part of how you find customers, readers or research, this is the maintenance pass worth doing now rather than after something breaks:
- Inventory every automated read. Alerts, dashboards, spreadsheet imports, anything pulling from Reddit on a timer. Anything unauthenticated is on borrowed time; anything hitting old Reddit already failed.
- Move what you keep onto credentialed access with documented rate limits, and accept the ceiling that comes with it rather than routing around it.
- Consolidate accounts rather than multiplying them. Under an identity-attributed regime, one account with two years of genuine comment history is worth more than six fresh ones, and it is worth more precisely because it can be identified.
- Write down which subreddits actually matter to you. Breadth was cheap when reading was anonymous and free. It is not any more, so depth in three communities beats a shallow presence in thirty.
The last one is the strategic shift hiding inside a login prompt. When access was free, the winning move was coverage. When every read is attributable and every account is evaluated, the winning move is being genuinely known somewhere specific — which is, not coincidentally, what Reddit's moderators have been asking for the entire time.
FAQ
Does this mean I cannot browse Reddit without an account at all?
Not as announced. The June 2026 change applied to old.reddit.com; Reddit stated at the time that it would not affect logged-out browsing on reddit.com. There have been reports of the main site testing a login requirement as well, but that remains unconfirmed. Treat old Reddit as login-required and the main site as "working today, do not build on it."
Why did the .json endpoints stop working before this?
Reddit announced the deprecation of unauthenticated .json access on May 28, 2026, and anonymous requests started returning 403 within days without a transition period. It was the same anti-scraping motive, applied to the endpoint that was easiest to automate against. The lesson generalizes: undocumented convenience endpoints get closed first and fastest, because nobody owes them a deprecation window.
Is making more accounts a reasonable workaround?
It is the most common response and the worst one. The stated purpose of the login requirement is to attach identity to requests so that abusive patterns can be detected — which means you are volunteering into exactly the system that was built to catch this. A handful of accounts that behave like separate people is survivable; a batch that behaves like one script is the thing being hunted.
The takeaway
The headline is "Reddit requires login." The actual story is that Reddit told you, plainly, what it is optimizing for: knowing who is asking.
If your approach depends on not being anyone in particular, this is a warning shot. If it depends on being a small number of accounts that a moderator would recognize as real, very little changed today — and quite a lot got easier, because the noise you were competing with just got more expensive to produce.