Twitter allows users to use 2FA without a phone number

Twitter announced that its users can protect their accounts with 2-Factor Authentication (2FA) even if they don’t have a phone number.

Twitter is going to allow its users to protect their accounts with 2-Factor Authentication (2FA) even if they don’t have a phone number.

2FA is already implemented on Twitter, currently, the users of the popular social network could use it with their mobile phone.

Twitter’s 2FA could leverage on text messages, mobile security apps, and security keys, the company now provides additional options to its users.

We’re also making it easier to secure your account with Two-Factor Authentication. Starting today, you can enroll in 2FA without a phone number. https://t.co/AxVB4QWFA1— Twitter Safety (@TwitterSafety) November 21, 2019To use the security keys, anyway, users still need either text message or authenticator app, the feature is only supported on the web.  

“Currently we require you to have a second method along with security keys since the latter isn’t currently supported outside web. If you’d like to disable SMS, you need to also have a mobile security app. We know this might not be ideal but we’re going to keep working on it,” said Twitter security engineer Jared Miller. 

Twitter users interested in how to enable two-factor authentication for their accounts can consult this page.

window._mNHandle = window._mNHandle || {};
window._mNHandle.queue = window._mNHandle.queue || [];
medianet_versionId = “3121199”;

try {
window._mNHandle.queue.push(function () {
window._mNDetails.loadTag(“762221962”, “300×250”, “762221962”);
});
}
catch (error) {}

Pierluigi Paganini

(SecurityAffairs – Twitter, 2FA)

The post Twitter allows users to use 2FA without a phone number appeared first on Security Affairs.