X (formerly Twitter) Users: Critically important Update Regarding Security Keys and Two-Factor Authentication
X is proactively updating its security infrastructure, and this requires action from users who rely on security keys or passkeys for two-factor authentication (2FA). This change is designed to bolster your account security as X transitions its domain from twitter.com to x.com. Here’s what you need to know and how to ensure continued access to your account.
Why is X Asking You to Re-enroll?
Currently, your existing security keys and passkeys are linked to the old twitter.com domain. Once that domain is retired, these keys will no longer function. this isn’t due to a security breach, but a necesary step in X’s ongoing platform evolution.
Who is Affected by This Change?
This update only impacts users who currently utilize either passkeys or hardware security keys (like YubiKeys) as their 2FA method. If you use a different 2FA method, such as an authenticator app or SMS codes, you don’t need to take any action at this time.
What are Passkeys and Security Keys, and Why Use Them?
Passkeys and security keys represent a critically important advancement in online security. They offer phishing-resistant protection by verifying your identity using cryptographic keys. These keys are stored securely on your device or within your operating system,eliminating the vulnerabilities associated with traditional passwords that can be compromised through phishing or malware.
What do you Need to Do?
by November 10th, you must re-enroll your security key to maintain access to your X account. you have three options:
* Re-enroll your existing security key: This is the simplest solution if you want to continue using your current key.
* Enroll a new security key: you can opt for a new key,but remember that any previously enrolled keys will stop working unless also re-enrolled.
* Choose a different 2FA method: Consider using an authenticator app as an choice.
* disable 2FA: While possible, this is strongly discouraged as it considerably reduces your account’s security.
What Happens if you Don’t Take Action?
After November 10th, if you haven’t re-enrolled a security key or chosen an alternative 2FA method, your account will be locked. You’ll need to complete one of the actions above to regain access.
How to Re-enroll Your Security Key
The process is straightforward. Simply follow these steps:
- Visit x.com/settings/account/login_verification/security_keys.
- Disable your existing security keys.
- Enroll them again.
- You will be prompted to enter your password to verify your identity.
Completing these steps will associate your security keys and passkeys with the x.com domain, ensuring they continue to function seamlessly after the twitter.com domain is retired.
Prioritizing Your Account Security
X is committed to providing a secure platform for all users. This update, while requiring a small amount of effort, is a crucial step in strengthening your account’s defenses against evolving online threats. Don’t delay – take action today to ensure uninterrupted access to your X account.
Related reading