X Required Security Key Re-Enrollment by Nov. 10, 2025
In short
On October 24, 2025, X Safety told users who use a security key or passkey for two-factor authentication to re-enroll it by November 10, 2025, because of the move from twitter.com to x.com. Accounts that didn't would be locked until they re-enrolled or switched methods.
On October 24, 2025, X's official Safety account announced that users who rely on a security key, such as a YubiKey, or a passkey as their two-factor method had to re-enroll it by November 10, 2025. The reason was the retirement of the twitter.com domain: keys registered to the old domain would no longer work on x.com. X said this was not caused by a security incident.
Accounts that missed the deadline would be locked until the owner re-enrolled a key, switched to another two-factor method such as an authenticator app, or turned off two-factor authentication. Users of SMS codes and authenticator apps were not affected.
SMS two-factor on X has been limited since 2023, when the company made text-message 2FA available only to paid subscribers. Free accounts use an authenticator app, a security key or a passkey instead. A phone number can still be requested during sign-up or when X wants to confirm an account.
The episode is a reminder that even strong methods like passkeys can need maintenance when a service changes domains or platforms, and that having a second method set up prevents a lockout. If you verified your own account with a number you no longer have, moving 2FA to a passkey or authenticator app is the safer setup.
What to do
On X and other apps, keep at least two second-factor methods registered, such as a passkey plus an authenticator app, and save your backup codes.
Sources
Related services
Related guides
More news
Discord Starts Global Age Assurance for All Accounts
On September 22, 2026, Discord began a global rollout that places every account in an adult, teen or unconfirmed group based mainly on account signals. Discord says more than 90% of users won't be asked to confirm their age manually.
Read →August 25, 2026WhatsApp Adds Multiple Passkeys, Replaces 2FA PIN
On August 25, 2026, WhatsApp said over a billion people now sign in with passkeys, let accounts add more than one passkey, and replaced the six-digit two-step verification PIN with a longer password. None of it is applied automatically.
Read →August 1, 2026Microsoft Is Phasing Out SMS Codes for Personal Accounts
In August 2026, Microsoft said it will start phasing out SMS as a sign-in and recovery method for personal Microsoft accounts, pushing passkeys, verified email and Apple or Google sign-in instead. It has not published a final cutoff date for consumers.
Read →July 27, 2026UK SIM Farm Ban: Offences Apply From October 29, 2026
The UK's Crime and Policing Act 2026, which received Royal Assent on April 29, 2026, creates offences for possessing or supplying SIM farms without good reason. Home Office guidance published July 27, 2026 says penalties apply from October 29, 2026.
Read →