logo

X: Re-enroll 2FA security keys by November 10 or get locked out

ID: f1b95a5d-6d1e-5aa2-9fc8-31af6ab099b4

STIX ID: report--f1b95a5d-6d1e-5aa2-9fc8-31af6ab099b4

Feed Name: Bleeping Computer

Date Published: 2025-10-27

Date Updated: 2026-07-18

Author: Lawrence Abrams

...
...

X is notifying users that all accounts using hardware security keys or passkeys for 2FA must re-enroll their keys by November 10 because keys are currently tied to the retiring twitter.com domain; accounts that do not re-enroll will be locked until users re-enroll, switch 2FA methods, or disable 2FA. The company states this is not due to a security incident but an administrative change related to the domain migration, and provides instructions to re-enroll keys via account settings (re-enrollment requires entering your password). Disabling 2FA is discouraged; users can instead re-enroll existing keys or enroll new ones, and enrolling a new key will invalidate other keys unless also re-enrolled.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.