X Announces Discontinuation of (twitter.com) Domain, Requires Users to Rebind Security Keys and Passkeys Within Two Weeks

According to 9to5Mac, X stated that its security keys and Passkeys are currently bound to “(twitter.com).” To “retire” this domain, accounts using hardware security keys or Passkeys are required to re-register them to “(x.com)” within two weeks; otherwise, the keys will become invalid, resulting in account lockout. X emphasized that this move is unrelated to any security incidents and does not affect other 2FA methods such as Authenticator apps. The official statement noted that after November 10, users who have not re-bound their keys will need to re-register, switch to other 2FA methods, or disable 2FA to unlock their accounts.