Twitter.com domain is finally going away and users need to do this by November 10 to continue using X

The social network formerly known as Twitter has begun the formal retirement of the twitter.com domain. As the first visible step in this migration to x.com, the company has instructed users who rely on hardware security keys or passkeys for two-factor authentication (2FA) to re-enroll these credentials by November 10. Failing to do so will result in account lockout until a new 2FA option is configured or security keys are re-registered.

Why re-enrolment is required

According to X Safety, existing security keys used for 2FA are currently bound to the twitter.com domain. With the platform now moving authentication to x.com, users must re-associate their keys with the new domain. X clarified that the change is not linked to a security breach and does not affect other 2FA methods such as authenticator apps or SMS codes.

What happens after November 10

Accounts using hardware keys that are not re-enrolled by the deadline will be automatically locked. Users in that state will need to either re-enroll their key, select a different 2FA method, or disable 2FA to regain access. X continues to recommend some form of 2FA for account security.

Impact of retiring twitter.com

The retirement of twitter.com is expected to have wide technical impact since the domain is deeply embedded across the web in links, APIs, embedded posts, and scripts. The company did not outline a timeline for the complete shutdown of the domain beyond this initial authentication change.