Two-factor authentication by text message will no longer be available for all users on Twitter. Users have begun receiving notifications telling them to remove the security feature or “risk losing access to Twitter.”
In a statement posted to its blog on Wednesday, Twitter made the official announcement that it will begin only allowing paid Twitter users to use SMS authentication for their accounts. “We have seen phone-number based 2FA be used - and abused - by bad actors,” the statement reads, using an acronym for two-factor authentication. “So starting today, we will no longer allow accounts to enroll in the text message/SMS method of 2FA unless they are Twitter Blue subscribers.”
Two-factor authentication requires users to enter a single-use code (often sent via SMS) in addition to their account password. This basic measure has been a helpful tool for many people to avoid hacking, doxxing, and identity theft. Twitter noted that other two-factor verification measures, like authenticator apps and security keys, would remain available.
Elon Musk, the CEO of Twitter, said in a tweet that the company has been “getting scammed by phone companies for $60M/year of fake 2FA SMS messages.” BuzzFeed News reached out to Twitter for any additional comment on the change, but did not immediately hear back.
@MKBHD Twitter is getting scammed by phone companies for $60M/year of fake 2FA SMS messages
Twitter Blue, a premium Twitter subscription which allows any user to buy a verification badge, costs $8 per month. Non-Twitter Blue users have 30 days to disable the security feature and enroll in the other two options provided: a physical security key or an authentication app. Any account that still has text authentication will have the feature automatically disabled by March 20.
honestly the shit twitter is pulling should be illegal? removing two factor authentication and making ppl PAY FOR IT?? when it should be offered no matter what (and is on most websites) is beyond messed up
Two factor authentication isn't a "perk." In today's environment, it's a basic personal security feature that should be legislated as standard across all platforms. This is like a landlord charging extra for locks on apartment doors.
“I had a stalker for years who would spend hours trying to hack my accounts,” culture writer Ella Dawson said. “I would get dozens of 2factor texts in a row. It was horrifying, but also a great lesson in how vital these security features are. Elon Musk is now charging for a basic necessity.”
Then they have THE NERVE to email you this little number after you are forced to turn off two factor authentication...they did not even change the outgoing email message. OMG what a mess.
On Friday, many began sharing screenshots of an in-app notification reminding users to disable the security feature or “risk losing access to Twitter.” Users outside the US have pointed out that Twitter Blue is not even available in some countries, making them more vulnerable without the option for SMS two-factor authentication. Celebrities like Alyssa Milano and Fifth Harmony’s Lauren Jauregui expressed their outrage, pointing out the dangers for their accounts as public figures.
“When we have legitimate careers that depend on our verifications as people pretend to be me every single day on this site. I’ve had this verification for 11 years and 2 step verification is necessary,” Jauregui said.
why would i pay $8 to use two factor authentication? i only need one factor (my brain) to authenticate that elon musk is a clown
Those who have tried to comply have reported issues with attempting to disable the option at all. #TwoFactorAuthentication and #TwitterDown began trending on the site on Saturday, as many people shared their failed attempts to follow through with the platform’s demand.
I logged onto Twitter and was greeted with a notification that said only Twitter Blue subscribers can use two factor authentication. Imagine being so bad at business you make people pay for standard security practices that are free everywhere. Will never pay.
imagine putting two factor authentication behind a paywall??? and then making it personal responsibility to remove it, which it won’t actually let me do, make it make sense
The change to two-factor authentication is the latest in a string of controversial decisions that Musk has made since taking over Twitter in October 2022. Musk previously drew backlash as Twitter effectively put verification badges, previously an unpaid distinction used to identify legitimate accounts of public figures like celebrities, journalists, and government officials, up for sale via the Twitter Blue subscription. Then, mass layoffs and reports of strenuous working conditions have drawn major backlash from users and public figures alike. Musk has defended the layoffs and changes to policy as necessary based on Twitter’s revenue.
This is fucking ridiculous. You have to pay for the most basic account safety functionality now. Elon Musk is paywalling freakin two-factor authentication on Twitter. Don't know a single website that does this. Elon's desperation is palpable.
Authentication apps like Duo and Google Authenticator are still available as options for your account security, but for some, this might be the final straw for their time on the app.
Me after I got booted of twitter for not turning off my two factor authentication
Everybody who’s not on twitter blue trying to use two factor authentication login