Twitter has announced that it will restrict the use of SMS-based two-factor authentication (2FA) to only its Blue subscribers, citing security concerns. Users that have enrolled for SMS-based 2FA, but have not subscribed to Twitter Blue, will have until March 20, 2023, to switch to alternative methods such as authenticator apps or hardware security keys. According to Twitter’s own data, SMS accounts for 74.4% of all active accounts that have enabled at least one form of 2FA, followed by authenticator apps (28.9%) and security keys (0.5%).