X warns users to re-enroll passkeys and YubiKeys for 2FA by Nov 10

X warns users who rely on passkeys or hardware security keys such as YubiKeys for two-factor authentication (2FA) to re-enrol by 10 November 2025 to avoid account lockout, with accounts that have not re-enrolled at risk of being locked until action is taken. The guidance allows re-enrolling existing security keys or enrolling a new one, and notes that those using other 2FA methods do not need to act.

The move is linked to the platform’s migration from twitter[.]com to x[.]com, not to a security incident, and keys tied to twitter[.]com will stop working after the deadline. Users must re-enrol, switch to another 2FA method, or disable 2FA (though this is not recommended) to regain access, by visiting x[.]com/settings, disabling old keys, re-enrolling, and confirming with a password. The guidance also specifies that safety messages from Safety on X’s timeline reiterate the requirement. According to Safety, the change is due to the new owners’ decision to retire the twitter[.]com domain.