Twitter finally makes an important security change that helps everyone

Twitter recently announced that users can disable SMS-based two-factor authentication, a requirement the company has held onto despite the increased security risk of receiving 2FA codes via SMS.

Two-factor authentication, widely considered a best practice when it comes to keeping your online accounts secure, adds an extra layer of security to your online accounts by requiring a six-digit number after you’ve entered the correct password for your account. Originally, two-factor codes were delivered primarily via text message, but that’s proven to be problematic. For example, Twitter CEO Jack Dorsey’s account was hacked in August.

The person(s) who had control of his account posted hateful messages before they were deleted. They were able to gain access to his account and get around two-factor authentication by switching the SIM card linked to his phone number and then receiving the SMS two-factor authentication code in a practice commonly referred to as SIM swapping.

With Twitter dropping the requirement, you can now opt to receive its 2FA codes strictly through third-party apps or a dedicated security key. Not only is this more secure, but you’ll also be able to access your codes even if your phone can’t receive text messages, like on a long flight. If you already have 2FA enabled on your Twitter account, or you’ve been holding out until the company ditched the SMS requirement, here’s what you need to know.

Set up 2FA for your Twitter account

If you haven’t taken the time to set up two-factor authentication for your Twitter account, now is as good a time as any. It only adds a few seconds to the login process, but goes a long way toward keeping your account secure. We’re going to cover setting up 2FA with an authentication app like Google Authenticator or 1Password. If you aren’t sure which app to use, we have a guide of the top password managers, most of which include authentication features……..read more

 

Source: CNET

Leave a Reply

Your email address will not be published. Required fields are marked *