If they do not have a Blue subscription, Twitter users will soon need to utilise an authenticator app or a security key in order to use two-factor authentication. Text-based 2FA is now only available to members who pay for the website’s membership service. Non-Twitter Blue members can no longer sign up for it, but those who have already done so have until March 20th to stop using it and switch to a different form of identification. If Twitter fails to transition before that date, their 2FA will just be disabled.
Twitter stated in its announcement that it made the choice after observing how “bad actors are using—and abusing—phone-number based 2FA.” Nonetheless, some detractors are dubious of Twitter’s justification and theorising that the company’s true goal is to include SMS 2FA as one of the products it offers with its subscription service. A Blue subscription, which puts a checkmark next to the user’s name, costs between $8 and $11 per month or $84 per year.
“We encourage non-Twitter Blue subscribers to consider using an authentication app or security key method instead,” the company said. “These methods require you to have physical possession of the authentication method and are a great way to ensure your account is secure.”