X to Phase Out Twitter Domain – Users Advised to Re-enroll in 2FA Keys

In Cybersecurity News - Original News Source is cybersecuritynews.com by Blog Writer

Social media platform X announced that it will stop supporting the old Twitter.com website for two-factor authentication (2FA) by November 10, 2025. This change marks the platform’s shift away from its Twitter roots.

Users relying on security keys tied to the old domain must re-enroll their devices to maintain account access, as part of X’s ongoing rebranding and security overhaul under Elon Musk’s leadership.

The update targets accounts using hardware security keys for 2FA, a robust method that enhances protection against phishing and unauthorized logins.

“By November 10, we’re asking all accounts that use a security key as their two-factor authentication method to re-enroll their key to continue accessing X,” the company stated in an official blog post.

Users can re-enroll existing keys or register new ones via the platform’s settings, but enrolling a fresh key will deactivate any prior ones unless they are also updated.

This change originates from X’s shift to its x.com domain following the 2023 rebrand, aiming to streamline authentication and eliminate outdated infrastructure vulnerabilities.

Security experts praise the step, noting that legacy domain ties could expose users to domain-spoofing risks amid rising cyber threats.

The transition has some challenges. If users do not re-enroll by the deadline, their accounts will be locked. They will then need to either update their keys, use alternatives like authenticator apps or SMS codes, or turn off 2FA completely. X strongly discourages disabling 2FA, as it is a risky choice.

Re-enrolling ensures compatibility with X’s modern security protocols. Hardware keys, such as YubiKeys, remain a gold standard for 2FA, offering phishing-resistant logins.

X recommends backing up multiple keys to avoid single points of failure, especially for high-profile accounts prone to targeted attacks.

This phase-out aligns with industry trends toward domain-agnostic authentication. As cybercriminals exploit old branding for social engineering, X’s update bolsters user safety. With over 500 million users, the platform urges immediate action to prevent disruptions.

Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.