Twitter abruptly stopped supporting two-factor authentication (2FA) using SMS last weekend. A feature that has long been given away for free is now only available to Twitter Blue subscribers. This raises concerns about the security of the Twitter account owned.
No need to worry because you can still use identity verification apps or security keys. How to use these other two features is easy if you use the instructions we provide below.
IDENTITY VERIFICATION APPLICATION
We chose Google Authenticator for this tutorial because it's the easiest and uses a Google account that we're sure many our readers already use. Other alternatives are Microsoft Authenticator and Authy. Download Google Authenticator from the Play Store or App Store before proceeding to the next step.
Turn off 2FA authentication using SMS by going to Settings & Support > Settings and privacy > Security and account access > Security > Two-factor authentication > Text messages> turn off
You will be asked to enter a password for identity verification.
Then go back to Settings & Support > Settings and privacy > Security and account access > Security > Two-factor authentication > Authentication apps
Press the Start button at the bottom of the screen.
You will be prompted to link your Twitter account to the identity verification application.
Press the App Link button.
The Google Authenticator app will open and the option to save the Twitter account will be given.
Press Ok.
Your account here is stored in Google Authenticator.
Now every time you want to log in to your Twitter account, you are asked to enter the 6-digit code displayed in Google Authenticator. This code has a time limit and must be entered immediately before another set of 6-digit codes is generated by Google Authenticator.
SECURITY KEY
In addition to using two-factor authentication applications such as Google Authenticator, Authy, LastPass Authenticator or Microsoft Authenticator you can also use a physical security key.
There are many physical keys in the market, but not many are sold in Malaysia. The example I use is the Google Titan Security Key. Another option is a key like the Yubikey by Yubico. There are also various forms of this key, such as using Bluetooth by simply pressing a button, NFC by simply tapping the key on the device or even with USB-A for use on Android devices or computers directly. But if you don't have this physical security key or feel the selling price is expensive, your smartphone either Android or iOS can also be used as this key.
This is an example of usage;
Open the Twitter website.
Go to Security and account access, select Security.
Select Two-factor authentication and turn on Security lock.
Then follow the instructions to Sync your security key and Name your key, press Get started and Add key.
In this tutorial I chose Use security key with USB.
Connect the key to the device (if using a USB-A dongle), touch the part of the key that lights up.
Give the key a name and save the backup code.
Now every time you want to log in to your Twitter account, regardless of using a phone or computer, make sure you carry this key with you wherever you go. When Twitter asks to do two-factor authentication, just connect this key to the device and tap to login successfully.
If you're using a phone as a physical security key, for example on an iPhone when Twitter asks for confirmation there will be an option to either use an iPhone, iPad or Android device – choose which one you're using then press Continue. There will be a QR code displayed and you just have to scan it with the device that has been turned into a key. Authentication is then with Touch ID or Face ID.
With the two 2FA features above, you no longer have to worry about the security of your Twitter account even though SMS support is no longer available. In fact, the above two identity verification features are actually more secure than other 2FA systems. Good luck.