X Security Key Fiasco Locks Users Out, Disrupting Services

Shares of X, the social media platform formerly known as Twitter, have not been directly affected by the recent security key switchover debacle, but users are facing significant disruptions. The company's mandatory two-factor authentication change, which required users to re-enroll using the x.com domain, has left many locked out of their accounts. According to reports, users who relied on passkeys or hardware security keys, such as Yubikeys, were instructed to re-enroll using the x.com domain. However, these passkeys and security keys are digitally tied to the old twitter.com domain and cannot be transferred to x.com. As a result, users were forced to manually un-enroll and re-enroll using the new x.com domain. X warned that after November 10, customers would have their accounts locked until they re-enrolled or chose another method of two-factor authentication. "We understand that this change may cause inconvenience to some users, and we apologize for any disruption it may cause," said a spokesperson for X. "However, this change is necessary to ensure the security and integrity of our platform." The issue arose from X's decision to retire the older twitter.com domain, which currently redirects to x.com. This change took effect in May 2024, but users who relied on passkeys or security keys were not given a clear solution for migrating their authentication methods. Industry experts point out that this security key switchover debacle highlights the challenges of migrating users to new authentication methods. "This is a classic example of a technology migration gone wrong," said cybersecurity expert, Rachel Kim. "Users were not given adequate notice or support to make the transition, and now they are facing significant disruptions to their accounts." As of now, users who are locked out of their accounts are unable to re-enroll their passkey or security key. X has not provided a clear solution or timeline for resolving the issue. The company has not commented on whether it will extend the deadline or provide additional support to affected users. The incident serves as a reminder of the importance of clear communication and user support during major platform changes. As X continues to evolve and grow, it will be crucial for the company to prioritize user experience and security in its decision-making process.