Concise Cyber

Subscribe below for free to get these delivered straight to your inbox

Advertisements
X Mandates 2FA Security Key Re-enrollment, Sets November 10 Lockout Deadline
Advertisements

X Announces Urgent 2FA Security Key Update

The social media platform X, formerly known as Twitter, issued an alert to users employing security keys for two-factor authentication (2FA). In late October 2023, the company sent emails with the subject line, “Important information about your X account,” notifying these users of a required security action. The email stated that due to a system change, all security keys needed to be re-registered on the platform.

Initial confusion and skepticism arose among some recipients regarding the email’s legitimacy, prompting questions about its authenticity. In response, the official X Safety account posted a confirmation, verifying that the email was indeed from X and that the required action was necessary. This official communication clarified the situation and validated the urgency of the user action requested.

Mandatory Re-enrollment by November 10 Deadline

The notification from X specified a firm deadline of November 10, 2023. Users were instructed to log into their accounts, navigate to the two-factor authentication settings, remove their currently registered security keys, and then immediately re-enroll them. This process was mandatory to ensure the continued functionality of the security key as a login method.

The company explicitly warned of the consequences for failing to comply with the directive. According to the email, any user who did not complete the re-enrollment process by the November 10 deadline would lose access to their account. The measure was presented as a necessary step to maintain account security following the internal system update. The action was required for all users who relied on hardware security keys, such as YubiKeys, for their 2FA protection on the platform.

Source: https://www.bleepingcomputer.com/news/security/x-re-enroll-2fa-security-keys-by-november-10-or-get-locked-out/