Same here, I've re-enrolled my Yubikeys 3 times so far, to the point that trying a full re-login asks "what do you want to use for 2FA?" and the list is 6+ generic named "Security Key".
Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)
51–60 of 74 posts
Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)
#52Same here, been reporting the broken flow to customer support. An interesting part is the "we'll send you an email to confirm you're you", followed by a "enter validation code here" screen that immediately gets forwarded to the re-enrollment message. Also, no confirmation emails are being sent. Very surprised to see this being deployed to prod.
on android and browser i get that behavior, on ios it just says "something went wrong" after the email confirm part
Same on iOS, with the fun bonus of the "something went wrong" modal looping as well! (Without retrying, you're just stuck in modal hell)
Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)
#53"Get a YubiKey," they said. "It'll be fun!," they said. Grrrrr.....stuck like Chuck.
What gets me is that I re-enrolled weeks ago and still got stuck in this loop. Sigh.
Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)
#54My account seems to be back, I didn't do anything. Just went to X and now it loads.
Now to see what configuration is set for 2fa on my account...
Looks like my traditional 2fa method was removed and only the security key is left.
Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)
#55My account seems to be back, I didn't do anything. Just went to X and now it loads. Now to see what configuration is set for 2fa on my account... Looks like my traditional 2fa method was removed and only the security key is left.
They forced turning off authenticator in the re-enroll flow for me originally. Now just stuck in a loop of authenticating. Hopefully mine comes back soon. This is frustrating.
Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)
#56Grok says they are reverting the changes now, should be fixed soon. Funny I can still get in to Gork.
Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)
#57My account seems to be back, I didn't do anything. Just went to X and now it loads. Now to see what configuration is set for 2fa on my account... Looks like my traditional 2fa method was removed and only the security key is left.
They forced turning off authenticator in the re-enroll flow for me originally. Now just stuck in a loop of authenticating. Hopefully mine comes back soon. This is frustrating.
Please explain to me how deactivating the "normal" 2fa is a good idea, they are so lost.
And idk man, I simply clicked on an article on Google and it loaded right up lol. Looks like they are reverting, try refreshing.
Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)
#58Earlier quoted context omitted.
They forced turning off authenticator in the re-enroll flow for me originally. Now just stuck in a loop of authenticating. Hopefully mine comes back soon. This is frustrating.
Please explain to me how deactivating the "normal" 2fa is a good idea, they are so lost. And idk man, I simply clicked on an article on Google and it loaded right up lol. Looks like they are reverting, try refreshing.
They are indeed very, very lost. I don't understand it either. Ideally, you want multiple methods of authentication! Sigh. If I do get back in I might just try re-adding it lol.
Thank you for your insight.
Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)
#59Looks like they reverted the changes, I was able to get back in.
Re: Users Stuck in YubiKey Re-Enrollment Loop on X (Twitter)
#60Same here on 2 accounts, both having 2fa through a HW key(yubikey; though passkeys have the same behavior). At some point today(few hours ago) both my desktop and phone got reditected to x.com/account/access, where the loop started.
Frustratingly enough, i had already done the "re-enrollment" a long time ago(basically when they announced it was mandatory), but it seems like that was pointless(hopefully not).
I saw some prompts about birdhouse, re-did the enrollment, and badly enough (I think i dug my own hole with this one) it asked to remove the other 2FA option (SMS), to which I clicked yes.
This might sound bad but I sincerely hope X fixes it somehow, and all the keys enrolled/re-(re-[etc])-enrolled are not lost, especially those that were not added today. It might be a good idea (in practice, bad for security) to disable this new "https://x.com/account/access?flow=two-factor-security-key-po..." garbage fully, as I don't see myself contacting X support anytime soon(for obvious reasons).