Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesTo enable two-factor authentication (2FA) on X, open Settings and privacy → Security and account access → Security → Two-factor authentication, choose an available method, and follow the verification prompts. X offers authentication-app codes and security keys; SMS is restricted and may not be available to your account. Save a backup code so you can sign in if you lose access to your phone.
What two-factor authentication does
X describes 2FA as an extra layer of account security that requires your password plus a secondary login method, such as a code or security key. This means a password alone is not enough to complete sign-in when 2FA is enabled.
Turn on 2FA in the X app
- Open X and go to Settings and privacy → Security and account access → Security → Two-factor authentication. These are X’s documented iOS labels. On Android or desktop, use the corresponding platform tab in X’s help instructions and follow the current prompts; the exact menu sequence may differ.
- Select an available method: Authentication app, Security key, or Text message if X offers it for your account.
- Complete the on-screen verification. Depending on the method, X may ask you to confirm account details, connect a device, or enter a code.
- Generate and securely store a backup code, if prompted. Keep it somewhere accessible if your phone is lost or replaced, but separate from the device used to authenticate.
Choose an authentication method
Authentication app
Choose Authentication app for time-based one-time-password (TOTP) codes from a compatible app. X may ask you to verify your password and confirmed email address, then displays a QR code to link the app. Scan it and enter the code the app generates to confirm setup. X names Google Authenticator, Authy, Duo Mobile, and 1Password as examples in its two-factor authentication guide.
This option does not depend on receiving an SMS, but you still need access to the authenticator app and its account or device. Plan for what you will do if you replace or lose that device.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Security key
Choose Security key and follow X’s prompts to verify the requested account details and connect the key. Depending on the key, connection may use USB, Bluetooth, or NFC. Check that the key works with the phone or computer you use before buying it. X allows enrolled keys to be managed and additional keys to be added. Its instructions say that adding a key for additional protection removes the requirement to use another backup method.
Text message (SMS)
SMS is not available to every X account. X says that, effective March 20, 2023, it no longer supports text-message 2FA for non-Premium subscribers. For Premium subscribers, SMS availability may vary by country and carrier. If SMS appears as an option, remember that receiving a code depends on the phone number and carrier service being available.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Prepare for a lost phone or a code problem
X says a backup code can help you sign in if you lose your phone or change your number. A code is automatically generated when you enable 2FA through the iOS or Android app, and you can also generate one on x.com. Store it securely and separately from your authentication phone. X’s 2FA troubleshooting guide says an inactive or out-of-order backup code may not work; generate a new one if needed.
A backup code is for signing in to X. If a third-party app associated with your X account asks for a temporary password, the backup code is not a substitute. X also notes that SMS codes can be delayed or unavailable when a device is offline or in flight mode. If you are locked out and do not have a working backup code, X directs you to contact support; recovery is not guaranteed.
Recommended Free Tools
Rank #3
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Strengthen the rest of your account security
2FA complements rather than replaces a strong, unique password. X advises using a strong password that you do not reuse on other websites in its account security guidance. Keep your recovery information current and make sure you can access your chosen authentication method before logging out of a device.
Quick Recap
Best Value
- Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
- USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
- FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
- Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
- Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
Rank #4
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
