X Requires Users to Reenroll Security Keys by Nov 10 for x.com

X is requiring users who authenticate with hardware security keys or passkeys to reenroll those keys by November 10, 2025, to maintain access as the company moves logins from twitter.com to x.com. The change, announced on X’s Safety account, will render security keys registered to the old domain inoperative unless they are reregistered under the x.com domain.

The Safety account said, “By November 10, we’re asking all accounts that use a security key as their two factor authentication 2FA method to reenroll their key to continue accessing X.” Users can reenroll an existing key or register a new one, but keys not reenrolled will stop working. After the deadline, accounts that have not reenrolled will be locked until the key is reregistered, another 2FA method is chosen, or two factor authentication is disabled. X advised users to retain 2FA for account protection.

X clarified that the requirement is not the result of a security breach and that it affects only hardware security keys such as YubiKeys and passkeys, not authenticator apps or SMS codes. The company explained the technical reason: security keys cryptographically bind credentials to a specific web domain to prevent...