The Twitter blog post states that the 2FA method will be disabled on March 20 if users do not adjust it before then. (file photo)
Some experts believe that SMS-based 2FA is not the best form of security, and removing it as a free option could highlight how much Twitter values security and its users. This is because attackers can intercept texts by hijacking target phone numbers or using other techniques
Twitter users are complaining and are confused about a notification on their handles stating “You must remove text message two-factor authentication”. The company released this feature in February but some users are still adapting to it.
Twitter said in its blog post that the platform will only allow users to secure their accounts with SMS-based two-factor authentication if they subscribe to Twitter Blue. In such a situation, as the last day of March 20 is coming closer, new changes are troubling the social media users.
First, it needs to be understood that, according to Twitter, SMS 2FA has been used and abused by bad actors, which is apparently costing it around $60 million per year.
However, in the notification, users are seeing a text that says “Only Twitter Blue customers can use the text message 2FA method. It will just take a few minutes to remove it. You can still use the Authentication app and Secure Key methods.” You can use.
Some experts believe that SMS-based 2FA is not the best form of security, and removing it as a free option could highlight how much Twitter values security and its users. This is because attackers can intercept texts by hijacking targets’ phone numbers or using other techniques.
But some criticized it, saying it was a bad PR stunt by the Twitter chief. Elon Musk To get more blue tick users. Also, according to some experts, using SMS 2FA is far better than not enabling any second authentication factor at all.
Some researchers had previously expressed concern, saying that Twitter’s policy change would not give users enough time to transition and that SMS two-factor would appear to be a premium feature.
What should be done?
Go to Settings and Support, then select Settings and Privacy, followed by Security and Account Access, Security and Two-Factor Authentication. Users will need to uncheck the box next to Text messages on web or mobile.
After following this process, the two-factor authentication of the account will be disabled. If someone tries to add SMS as a 2FA option without first signing up for Twitter Blue, they’ll be asked to choose an authenticator app or security key.
Users can install a preferred authenticator app, such as Google Authenticator, which is the most prominent third-party app used for 2FA. After this, users on Twitter can go to Settings and Privacy, followed by Security and Account Access, Security, Two-Factor Authentication and Authentication App. Users will then need to enter the password and click on Confirm to proceed.
This is currently the most convenient way to ensure that users have another layer of security for their Twitter accounts.
However, what will happen if users do not disable SMS two-factor by the new deadline is unknown. According to the in-app message, users who still have SMS 2FA enabled will be locked out of their accounts when the change takes effect on March 20.
But the blog post states that the 2FA method will be disabled on March 20 if users don’t adjust it before then.
“Disabling text message 2FA does not automatically unlink your phone number from your Twitter account. If you wish to do so, instructions for updating your account phone number are available in our Help Center.
However, there is still some confusion, with some believing that if users don’t do something to add security layers, maybe not much will happen and people will still be able to use Twitter. But perhaps this will increase the chances of getting a Twitter account hacked.
read all Latest Tech News Here