X (Twitter) Two-Factor Authentication: Set Up, Fix Codes, Use a Backup

Two-factor authentication (X also calls it login verification) means you need your password plus a code, an app confirmation or a security key to log in. X says text-message two-factor is now Premium-only, so most people use an authentication app or a security key.

Quick answer

On iPhone, Android or x.com: Settings and privacy > Security and account access > Security > Two-factor authentication, then choose Authentication app, Security key or Text message (Premium only). Save the backup code X shows you. At login, tap Choose a different two-factor authentication method if the one X asks for isn’t available.

Does this match what you see?

  • X asks for a two-factor code you can’t get.
  • Text-message codes stopped working on a free account.
  • An app or device won’t accept your normal X password after turning on two-factor.

iPhone & iPadAndroidComputer (browser)

Based on X Help Center “How to use two-factor authentication” (iPhone, Android and Desktop tabs), supplied by the site owner, October 31, 2026.

Why this happens: the possible causes

Common two-factor problems on X.

X two-factor problems
ProblemWhat to do
No text codes on a free accountSwitch to an app or key
Can’t use the usual method at loginChoose a different method
Another app rejects your passwordUse a temporary password
  • Text-message 2FA is Premium-onlyCheck this first

    X says since March 20, 2023, text-message two-factor isn’t supported for non-Premium accounts.

  • Temporary password neededPossible

    X says after turning on two-factor, other devices or apps that ask for your X password need a temporary password.

Try these 60-second checks first

  • Keep your backup code somewhere safe.
  • Make sure your email is confirmed; X checks this during setup.

How to fix it, step by step

Work through these in order. They start with the quickest, safest checks and only move to steps that sign you out or remove data later.

Fix 1: Turn on two-factor authentication

May sign you out5 miniPhone & iPadAndroidComputer (browser)

X’s steps for iPhone, Android and x.com (on Android, open Settings from the menu or your profile icon; on x.com, More in the side menu). During setup, X also makes sure you have a confirmed email, and may send a code to confirm it.

  1. Main menu > Settings and privacy > Security and account access > Security > Two-factor authentication.
  2. Authentication app: tap it > Start, enter your password if asked, then Link app now. Use any time-based (TOTP) app such as Google Authenticator, Authy, Duo Mobile or 1Password. Scan the QR code, tap Next, enter the code from the app and tap Verify.
  3. Security key: tap it, enter your password, then Start. Plug the key into your phone’s or computer’s USB port, or connect it by Bluetooth or NFC, and touch its button. X says a security key can be your only method. On a computer, X says you need the latest version of a supported browser such as Chrome, Edge, Firefox, Opera or Safari.
  4. Text message (Premium): check the box next to it > Get Started (Next on Android and x.com), enter your password, add a phone number if asked, then enter the texted code. Screenshot the backup code and tap Got it.

X says you can manage, rename, delete or add security keys under Manage security keys in Two-factor authentication.

Did it work? Our check: next time you log in, X asks for your second step after your password.

Fix 2: Use a different method at login

Safe & reversible2 miniPhone & iPadAndroidComputer (browser)

X says at login it asks for the method you used last time, but you can switch.

  1. Enter your password as usual.
  2. On the two-factor screen, tap Choose a different two-factor authentication method and follow the prompts.

Did it work? Our check: you’re logged in using another method or your backup code.

Lost your phone or got a new one

  • Lost phone: X says enter your backup code to log in, then update your settings. If you’re logged out and have no active backup code, contact X support.
  • Still logged in on x.com with text-message 2FA as your only method? X says you can delete your phone in your Mobile settings (Delete my phone), which turns two-factor off automatically.
  • New phone: X suggests backing up your old phone first so your app session carries over. On iPhone, X recommends an encrypted backup; it says iCloud backups alone usually don’t keep the app key, so you may need a temporary password from x.com. Apple explains how: connect the iPhone to a computer, open Finder (Mac) or the Apple Devices app (PC), select your device, then check Encrypt local backup (Apple’s guide (external site, opens in a new tab)); you’ll need the password you set to restore it. You can also turn off two-factor on the old phone, or on x.com if you’re still logged in there. If neither works, log in to x.com with your backup code.

Didn’t get the text code or push notification

  • Text code late? X says texts can be delayed; wait at least two minutes before trying again. Changed your number or carrier? Update it in settings, or log in with a backup code first.
  • Phone offline or in airplane mode? Generate a code in the X app instead: Settings and privacy > Account > Security > Login code generator.
  • No push notification? X says make sure mobile notifications are on. You can also see and approve requests under Settings and privacy > Account > Security > Login Requests (pull down to refresh), or choose Request a code sent to your phone via SMS on x.com.
  • Verizon customer? X says log out and back in; if you still get no PIN, text GO to 40404 to opt in to texts from X.
  • Can’t log in on your phone? X suggests logging in on x.com from a computer, or signing out on the device you used to set up two-factor; X says this turns two-factor off, so you can log back in with just your username and password.

Backup codes: using them and fixing errors

  • X creates a backup code when you turn on two-factor in the app; you can make a new one under Settings and privacy > Account > Security > Backup code, or on x.com. Write it down, print it or screenshot it.
  • To use one: log in with your username and password, then click the link to enter your backup code when X says it sent a two-factor request.
  • Error? X says you can have up to five active codes, and you must use them in the order you made them; using one out of order invalidates all earlier codes. An inactive or out-of-order code gives an error, so generate a new one.
  • X says backup codes work on x.com, mobile.x.com and the X apps. For a third-party app, use a temporary password instead; backup codes and temporary passwords aren’t the same.

Text-message codes stopped working

X says that since March 20, 2023, two-factor by text message isn’t supported for non-Premium subscribers; if it was still on, you’re asked to turn it off before you can keep using your account. For Premium, availability varies by country and carrier. Switch to an authentication app or security key instead (see turn on two-factor).

Asked for a temporary password

X says once two-factor is on, other devices or apps that ask for your X password need a temporary password; your normal password won’t work there. X may text you one, or you can make your own: Settings and privacy > Security and account access > Two-factor authentication > Temporary password (under Additional methods; on x.com, start from More). X says temporary passwords expire after one hour, and you don’t need one for the X iPhone or Android apps or mobile.x.com.

Older setups: approving login requests

X says if you turned on login verification before March 21, 2016, you may get a push notification to approve logins, or can ask for a code by text. You can also approve or deny requests in the app under Security > Login Requests (pull down to refresh).

Turn off two-factor

Settings and privacy > Security and account access > Security > Two-factor authentication, tap the slider next to your method, then tap Turn off twice (on Android, tap the checkbox next to your method, then Turn off; on x.com, uncheck the box). Our advice: turn on another method first, so your account stays protected.

How to know it worked

  • Our check: two-factor is on with an app or key, and your backup code is saved somewhere safe.

Still not working? Your next steps

  1. Lost every two-factor method and can’t log in? See can’t log in to X.

Official help routes

SocialAppFix can’t see or change your account. For account decisions, recovery and appeals, only the platform’s own tools can help. These links go to the official sites.

Frequently asked questions

Why did X turn off my text-message two-factor?

X says since March 20, 2023, text-message two-factor is only supported for Premium subscribers, and availability varies by country and carrier.

Which authentication apps work with X?

X says any time-based one-time password (TOTP) app, such as Google Authenticator, Authy, Duo Mobile or 1Password.

Can I use only a security key on X?

Yes. X says a security key can be your sole two-factor method.

Sources and how we checked this guide

We base steps on the platforms’ own help pages and the phone makers’ official guides. Menu names change often and can differ by device, app version and region. Where a platform page could not be independently read, we link it so you can check the current wording yourself.

  1. Phone number FAQs (external site, opens in a new tab)X Help Center · checked 31 October 2026
  2. How to use two-factor authentication (external site, opens in a new tab)X Help Center · checked 31 October 2026
  3. Help with two-factor authentication (external site, opens in a new tab)X Help Center · checked 31 October 2026
  4. About encrypted backups on your iPhone, iPad, or iPod touch (external site, opens in a new tab)Apple Support · checked 31 October 2026

Last reviewed 31 October 2026 by the SocialAppFix editorial team against the sources above. Next scheduled review: 31 January 2027. How we write and review guides.

What changed
  • 31 October 2026: First published.

SocialAppFix is an independent guide and is not affiliated with or endorsed by X Corp.. We never ask for passwords, login codes or payment to fix an account.