Twitter has discontinued two-factor authentication via SMS. This is a critical tool to protect users from hackers. There’s an alternative, however, that provides even greater security without costing anything.
Two-factor authentication allows users to prove that they are the person they claim to be by creating a temporary code on their phones. It works as an additional password for one time. Hackers can sometimes gain access to passwords of people , especially if they use the same ones across multiple websites. Enabling two-factor authentication makes hacking more difficult.
Twitter last month announced that users will no longer be able text message two-factor authentication (SMS 2FA) with their mobile phones. This is where the user receives their one-time code via text message. The method could still be used by subscribers who have paid for the subscription service.
It’s still possible to get a better two-factor authentication by using an authenticator app on your phone. There are several trusted tech and security companies that offer free versions, such as Twilio’s Authory and Google. Anyone who downloads one and syncs it with their account will be able to see temporary 2FA codes continuously generated.
An authenticator app is better than text message authentication, according to cybersecurity experts. This is because dedicated hackers can intercept victim’s text messages using a technique called SIM Swapping. Hackers cannot access the authenticator app codes of a victim’s user unless they have physical access.
These are the basics of how to create an authenticator app. Specifications can differ depending on which app you use, what mobile operating system you have, and whether or not your device is running Twitter on mobile.
- Follow the instructions to install an authenticator app. This can include allowing it text or email verification.
- To sync your account with the authenticator, go to Twitter’s security setting.
- To get a new code, tap the authenticator app whenever you need it.
Twitter’s decision not to allow text-based 2FA via free text messages was a significant step by a major tech company. Major websites and the U.S. government have encouraged users to use 2FA for years. As a way of reducing the number accounts that are being hacked, major websites and the U.S. government have been encouraging more people to use 2FA for years. Experts agree that an authenticator app is better than using SMS, but the SMS version is more popular.
Only a fraction of Twitter users use two-factor authentication. According to a July transparency report, only 2.6% of Twitter users use 2FA. Nearly three-quarters of those who used 2FA used the text version.
Since then, Twitter has not published any transparency reports and seems that the practice was stopped by Elon Musk. Twitter didn’t respond to a request to comment because its dedicated email for press inquiries now automatically sends a emoji.
Musk has indicated he will end free SMS 2FA as text messaging services cost money. With experts, he has agreed that an app provides better cybersecurity.
Although Twitter’s decision may encourage users to use an authenticator app, it will most likely make the site less secure, according to Alyssa MILLER, a cybersecurity speaker, author, and cybersecurity expert.
Miller stated that while there may be a silver lining, it is clear that the decision made by Twitter was cost-savings and had nothing to do about making users’ accounts safer. I would argue that the adverse impact on adoptionability outweighs any incremental benefits.
She stated that the change “makes Twitter’s platform ultimately less secure for its user base.”
