Aaron Parecki

We encourage non-Twitter Blue subscribers to consider using an authentication app or security key method instead. These methods require you to have physical possession of the authentication method and are a great way to ensure your account is secure.

Does this mean that they are still supporting TOTP and others for non Twitter Blue subscribers?

If so, that’s still a weird choice (to ditch SMS and keep others) as those are much more technical methods of auth than SMS. I would imagine most of their user base would have no idea how to set up apps like Authy or Google Authenticator.

Such an odd move.

@aaronpk wtf??? Can t be true.! 😲🤦‍♂️

@aaronpk but the blog post says it's for security - only you can pay to keep using the insecure method...

@aaronpk @druid

One can only hope that this finally persuades people just how unsafe an environment Twitter is under Musk. I’ve used 2fa since that period during the EURef campaign when hacking attempts became routine. My account is still there, unused - but this will end it.

@aaronpk right?!

@aaronpk you can imagine a whole series of security “upsells” here. For $13/month you can use 6 character passwords. At our platinum paid security level of $16.99/month, consecutive characters are permitted, common keyboard patterns and even password123 #twitter #infosec