PSA: Reregister your hardware 2FA key for X before November 10 to avoid getting locked out

In a recent announcement, the social media platform X revealed its intention to phase out the twitter.com URL for authentication purposes. Users who utilize hardware keys, such as YubiKey, for two-factor authentication (2FA) must re-enroll their keys by November 10 to maintain access to their accounts. The platform's safety account communicated that all users relying on security keys as their 2FA method need to take action: "By November 10, we’re asking all accounts that use a security key for two-factor authentication to re-enroll their key to continue accessing X. You can either re-enroll your existing security key or set up a new one." This change is part of the company's broader strategy to retire the outdated twitter.com domain. It’s important to note that this transition does not affect other 2FA methods, such as Google Authenticator, Microsoft Authenticator, or Authy. The safety account clarified, "This update is not driven by any security issues and only impacts YubiKeys and passkeys—not other 2FA solutions. Security keys currently linked to the twitter.com domain must be re-enrolled to associate with x.com, facilitating the deprecation of Twitter’s domain." Christopher Stanley, a security engineer at X, xAI, and SpaceX, emphasized the importance of this transition for maintaining domain trust. He explained, "We are moving away from Twitter enrolled keys to eliminate the need for unconventional measures related to domain trust. Physical security keys are cryptographically linked to Twitter’s domain and must be re-enrolled under X." For users employing a hardware key to safeguard their accounts, the process can be completed by navigating to Settings > Security and account access > Two-factor authentication > Manage security keys. As of now, it remains uncertain whether X will discontinue the twitter.com domain for all functionalities or if this decision is solely for security reasons. We have reached out to the company for further clarification and will provide updates as more information becomes available.