AWS Launches New Nova AI Models And a Service That Gives Customers More Control

Re-register your hardware 2FA key for X before Nov. 10 to avoid getting locked out

Social network X is reminding users to re-register their hardware 2FA key for X before Nov. 10 to avoid getting locked out of their accounts. The company announced that it’s retiring the twitter.com URL for authentication — a move that directly impacts users relying on physical security keys like YubiKey.

Image : Google

According to X’s Safety account, all users who use a hardware-based two-factor authentication (2FA) method must re-enroll their key before November 10. “You can re-enroll your existing security key, or enroll a new one,” the company posted last Friday.

Why X users need to re-register their 2FA keys

The change comes as part of X’s ongoing transition away from the twitter.com domain. Since hardware 2FA keys are cryptographically tied to specific domains, those currently linked to twitter.com will no longer work once the URL is retired.

“To clarify: this change is not related to any security concern, and only impacts YubiKeys and passkeys — not other 2FA methods like Google Authenticator or Authy,” X explained. By re-registering your hardware 2FA key for X before Nov. 10, you’ll ensure it’s properly associated with the x.com domain.

What security experts are saying

Christopher Stanley, a security engineer at X, xAI, and SpaceX, said this move is about maintaining domain trust and avoiding workarounds. “Physical security keys are cryptographically registered to Twitter’s domain and need to be re-enrolled under X,” Stanley shared on X.

He noted that migrating away from twitter.com is essential to ensure smooth authentication and better domain integrity moving forward.

How to re-enroll your hardware 2FA key for X

If you’re using a hardware key to secure your X account, here’s how to re-enroll it:

1. Go to Settings → Security and account access.

2. Select Two-factor authentication.

3. Tap Manage security keys.

4. Follow the prompts to re-register your key under x.com.

This quick process ensures uninterrupted access to your account after November 10.

What’s next for the X domain transition

It’s unclear whether X plans to completely retire the twitter.com domain or just for security purposes. The company hasn’t issued an official timeline for full migration, but this 2FA update suggests broader changes are on the horizon.

For now, make sure to re-register your hardware 2FA key for X before Nov. 10 — or risk getting locked out of your account once the old domain is deactivated.