X Security Key Issue: Users Locked Out

X Account Access Issues Following Security Update

Numerous reports are surfacing on social media indicating that users of Elon Musk’s X platform are encountering difficulties, including being trapped in repetitive loops and, in certain instances, being denied access to their accounts.

These problems appear to stem from a recently implemented mandatory update to the two-factor security system that has not functioned as intended.

Two-Factor Authentication Changes

On October 24th, X announced via a post that users who utilize passkeys or hardware security keys – like YubiKeys – for two-factor authentication were required to re-register their security settings using the x.com domain.

Users employing authenticator apps remain unaffected by this change.

Domain Transition Complications

The stated purpose of this requirement is to phase out the older twitter.com domain, which currently redirects to x.com. This domain redirection became active in May 2024.

However, passkeys and security keys are digitally linked to the previous twitter.com domain and cannot be automatically migrated to x.com.

Consequently, affected users must manually revoke their existing security settings and then re-register using the new x.com domain.

Account Lockouts and Deadline

X cautioned that after November 10th, accounts would be locked for users who had not re-enrolled or selected an alternative two-factor authentication method.

With the deadline now passed, a significant number of users are reporting account lockouts and difficulties re-enrolling their passkeys or security keys, citing error messages or being stuck in endless registration loops.

Recent Challenges for X

This issue represents the latest in a series of challenges faced by X since its acquisition by Elon Musk, who purchased the platform (formerly known as Twitter) for $44 billion.

Since taking ownership, the company has undergone substantial workforce reductions and has been involved in numerous controversies.