Register 2FA Key for X - Deadline November 10

X (formerly Twitter) to Phase Out Twitter.com Authentication

Social network X has announced plans to discontinue the use of its twitter.com URL for authentication purposes. This change necessitates action from users who currently utilize two-factor authentication (2FA) with a hardware security key, such as a YubiKey.

Re-enrollment Required for Hardware Key Users

Users employing hardware keys for 2FA are required to re-register their keys prior to November 10th to maintain uninterrupted access to their X accounts. The platform’s official safety account communicated this requirement last Friday.

“All accounts leveraging a security key for 2FA must re-enroll their key by November 10th to ensure continued access,” the post stated.

Domain Change as the Primary Driver

The company clarified two days later that this action is a direct result of its intention to retire the legacy twitter.com domain. Importantly, this transition is not anticipated to affect other 2FA methods, including applications like Google Authenticator, Microsoft Authenticator, and Authy.

The change specifically impacts YubiKeys and passkeys currently linked to the twitter.com domain. Re-enrollment will associate these security keys with the x.com domain, facilitating the retirement of the Twitter domain.

Ensuring Domain Trust

Christopher Stanley, a security engineer associated with X, xAI, and SpaceX, explained that this move is crucial for establishing robust domain trust. He stated that the re-enrollment process eliminates the need for temporary solutions related to domain verification.

“Physical security keys are cryptographically bound to Twitter’s domain and require re-enrollment under X to allow us to retire the Twitter domain and cease workaround measures for domain trust,” Stanley explained.

How to Re-enroll Your Security Key

If you are currently using a hardware key to protect your X account, navigate to Settings > Security and account access > Two-factor authentication > Manage security keys to begin the re-enrollment process.

Future of Twitter.com Domain Remains Unclear

It is currently unknown whether X intends to fully retire the twitter.com domain across all functionalities, or if this change is limited to authentication procedures. A request for clarification has been submitted to the company, and this article will be updated upon receiving a response.

The transition aims to streamline security protocols and align authentication with the platform’s new branding and domain structure.