Social Media Platform X Introduces Passkey Support on iOS, Enhancing User Security
X, the social media platform formerly known as Twitter, has announced the introduction of passkey support for its U.S. users on iOS devices, marking a significant step in enhancing user security. This move follows the company’s earlier decision to discontinue SMS-based two-factor authentication (2FA) for non-paying accounts last year.
Passkeys: A Leap Towards Passwordless Security
Passkeys, representing a more secure alternative to traditional passwords, have been gaining traction among various applications, including PayPal, TikTok, WhatsApp, and others. Developed through a collaborative effort involving tech giants Google, Apple, Microsoft, and the FIDO Alliance, along with the World Wide Web Consortium, passkey technology is designed to facilitate passwordless logins across different devices and platforms.
How Passkeys Work
Introduced on iOS devices in September 2022 and Google accounts in May of the same year, passkeys utilize biometric authentication methods such as Face ID or Touch ID, a PIN, or a physical security key. This innovative approach not only streamlines the login process by integrating the benefits of 2FA into a single step but also significantly bolsters security measures.
Addressing Security Concerns on X
The implementation of passkeys is particularly vital for X, given the history of high-profile account breaches on the platform. Notable incidents include the hacking of the U.S. Securities and Exchange’s X account with an unauthorized post about Bitcoin ETF approval, Donald Trump Jr.’s X account displaying a fabricated message about Donald Trump’s demise, and a 2020 crypto scam that compromised several prominent accounts, including those of Apple, President Biden, and X owner Elon Musk. These breaches often involved the use of accounts to disseminate false information or promote fraudulent schemes.
Controversy Over Removing SMS 2FA
X’s decision to eliminate SMS 2FA for non-paying users was a controversial one, perceived as a cost-saving measure but criticized for potentially reducing the platform’s overall security. The company had justified the move by citing vulnerabilities such as SIM swap attacks. However, this change was met with concerns about the impact on user account safety.
Rollout and Future Expansion
X has provided guidance for iOS users in the U.S. on setting up passkeys, signaling a commitment to enhanced security features. While the company has not specified a timeline for introducing passkey support on other platforms or expanding to more markets, this development represents a crucial step in safeguarding user data and account integrity in the evolving digital landscape.