Two-factor authentication is an extra layer of security for your >x< account. Instead of only entering a password to log in, you’ll also enter a code or use a security key. This additional step helps make sure that you, and only you, can access your account. During enrollment, we’ll also make sure you have a confirmed email address associated with your account. That way, we can use your email address for things like communicating with you to keep your account secure.
After you enable this feature, you will need your password, along with a secondary login method –– either a code, a login confirmation via an app, or a physical security key to log in to your account.
For iOS:
From the main menu, tap Settings and privacy.
Tap Security and account access.
Tap Security.
Tap Two-factor authentication.
There are three methods to choose from: Text message, Authentication app, or Security key.
Once enrolled, when you log in to your account, you'll be prompted to provide the two-factor authentication method you used during your previous login, along with your password. You’ll also see the option to Choose a different two-factor authentication method. If you’d like to proceed, simply tap the prompt to select a different method. Follow the onscreen instructions to finish logging in.
To sign up via text message on iOS:
Click the checkbox next to Text message.
Read the overview instructions, then tap Get Started.
Enter your password, then tap Verify.
If you haven’t already, we’ll ask you to confirm an email for your >x< account: Enter your email address, then tap Next. We’ll then send you a confirmation code via email. Back in your >x< account, enter the code in the prompt, then tap Verify.
Note: If you don’t already have a phone number associated with your account, we’ll prompt you to enter it. Additionally you can choose to deselect the option to allow your existing contacts to find you on >x<.
Now we’ll ask you to enter the confirmation code we sent you via text message. Type or paste in the code, You’ll see a confirmation screen with a backup code. We recommend you store a screenshot of the code in case you need it for future use. This will help you access your account if you lose your mobile phone or change your phone number.
Tap Got it when you’re finished with this screen.
To sign up via authentication app on iOS:
Tap the box next to Authentication app.
Read the overview instructions, then tap Start.
If prompted, enter your password and tap Verify.
If you haven’t already, we’ll ask you to confirm an email for your >x< account: Enter your email address, then tap Next. We’ll then send you a confirmation code via email. Back in your >x< account, enter the code in the prompt, then tap Verify.
You’ll be prompted to Link app now to your >x< account. (If you don’t already have an app installed on your device, you’ll need to download one. You can use any Time-based One Time Password (TOTP) authentication app like Google Authenticator, Authy, Duo Mobile, 1Password, etc.)
After you scan the QR code, tap Next.
Enter the code generated by your authentication app, then tap Verify.
You’ll see a confirmation screen. Tap Got it to finish setup.
Now, through your authentication app, you can view and use codes to log in to your >x< account.
To sign up via Security key on iOS:
Tap Security key.
When prompted, enter your password.
If you haven’t already, we’ll ask you to confirm an email for your >x< account: Enter your email address, then tap Next. We’ll then send you a confirmation code via email. Back in your >x< account, enter the code in the prompt, then tap Verify.
Read the overview, then tap Start.
You can either insert the key(s) into the USB port of your mobile device, or sync it over Bluetooth or NFC. Once inserted, touch the button on your key.
Follow the on-screen instructions to finish setup.
When done, your security key(s) will appear in the Manage security keys section under Two-factor authentication. From there, you can rename or delete your security key(s), and add additional security keys to your account at any time.
Note: If you add a security key for additional two-factor authentication protection, we no longer require using another backup method for more protection. Security keys can be used as your sole authentication method, without any other methods turned on.
If you enrolled in login verification before March 21, 2016:
When you log in to your account on x.com or on another device using >x< for iOS, >x< for Android, or mobile.x.com, a push notification may be sent to your phone. Open the push notification to approve the login request. Once you approve, you will be immediately logged in to your account on x.com.
You may also receive a login code via SMS text message. You can opt into this by clicking request a code sent to your phone via text message when you log in to your account on x.com.
Note: You can also approve or deny your login requests from within the app by tapping Security, then tapping Login Requests. Pull down on the list to refresh for new requests. Requests will appear on this screen even if you did not receive a push notification.
How to turn off two-factor authentication on iOS:
From the main menu, tap Settings and privacy.
Tap Security and account access.
Tap Security.
Tap Two-factor authentication.
Tap the slider next to your selected two-factor authentication method to turn it off.
Tap Turn off two times to confirm your choice.
Temporary passwords
After you enable two-factor authentication for your account, you'll need to use a temporary password to log in to >x< on other devices or applications that require you to enter your >x< password; you will not be able to log in using your usual username and password combination. If we detect you will need a temporary password to log in, we will send one via SMS text message to your phone. Alternatively, you can generate your own temporary password.
From the main menu tap Settings and privacy.
Tap Security and account access.
Tap Two-factor authentication.
Under Additional methods, tap Temporary password.