Image Credits:Collage: TechCrunch / Getty Images11:40 AM PST · November 12, 2025
We’re seeing reports crossed societal media that users of Elon Musk’s X are getting stuck successful endless loops and, successful immoderate cases, getting locked retired of their X account, pursuing a mandatory two-factor information alteration that seems to person gone wrong.
On October 24, X said in a post that it was asking users who trust connected passkeys oregon hardware information keys (such arsenic Yubikeys) arsenic their method of two-factor authentication to re-enroll utilizing the x.com domain. (Users who usage an authenticator app are unaffected.)
X said this was portion of an effort to discontinue the older twitter.com domain, which presently redirects to x.com. That alteration took effect successful May 2024. The occupation is that passkeys and information keys are digitally tied to the aged twitter.com domain and can’t beryllium transferred to x.com. That means users person to manually un-enroll and re-enroll utilizing the caller x.com domain.
As portion of the switchover, X warned that aft November 10, customers would person their accounts locked until they re-enroll oregon take different method of two-factor authentication.
Now that the deadline has passed, plentifulness of users are reporting that they’ve been locked retired of their accounts and can’t re-enroll their passkey oregon information key, citing mistake messages oregon getting caught successful an endless loop.
This is the latest contented to beset X, present owned by Elon Musk aft helium bought Twitter, arsenic it was known then, for $44 billion. Since taking complaint of the societal networking site, the institution has experienced massive layoffs and countless controversies.
X did not respond to a petition for comment, but Musk, who present owns X, has been posting arsenic usual, presumably unaffected by the change.
Zack Whittaker is the information exertion astatine TechCrunch. He besides authors the play cybersecurity newsletter, this week successful security.
He tin beryllium reached via encrypted connection astatine zackwhittaker.1337 connected Signal. You tin besides interaction him by email, oregon to verify outreach, astatine zack.whittaker@techcrunch.com.















English (US) ·