If you‘re one of the many Twitter users who relies on SMS text messages for two-factor authentication (2FA) codes, you may have found yourself locked out of your account recently due to issues with receiving authentication texts.
When attempting to log in, impacted users see an error message stating "We cannot send a text message to this phone number because its operator is not supported" which prevents them from being able to enter the needed 2FA code and access their account.
How Widespread Is the Problem?
The scale of this SMS authentication code issue appears to be quite substantial, judging by the outpouring of user complaints across Twitter and other social media platforms. Many users have expressed frustration at being locked out of their accounts and dissatisfaction with Twitter‘s handling of the situation.
According to a 2020 survey by DataProt, 53% of Twitter users have enabled 2FA on their accounts, and SMS text messages are the most commonly used 2FA method. Twitter reports having 396 million active users worldwide. So even if a small percentage of those 2FA-enabled accounts are impacted by SMS sending issues, it could still translate to millions of affected users.
Twitter‘s @TwitterSupport account released a statement acknowledging the SMS code problem, classifying it as impacting a "few cases." However, many users have argued that the issue seems far more widespread based on the sheer volume of complaints and people reporting being locked out of their accounts.
One Twitter user shared:
"Hey @TwitterSupport, my account is still pending for SMS codes, but they are still not arriving. It‘s been over 48 hours now."
What‘s Causing the SMS Code Issues?
There are a few potential reasons why you might encounter the "We cannot send a text message to this phone number" error:
Blocked SMS short codes: Twitter sends authentication codes from the SMS short code 40404. If you have ever accidentally blocked texts from this number, you won‘t be able to receive Twitter‘s text messages.
Unsupported mobile carriers: While Twitter supports sending authentication texts to most major mobile providers, there are some smaller or regional carriers that may not be compatible with Twitter‘s SMS system.
Technical issues on Twitter‘s end: Twitter has acknowledged ongoing challenges with its SMS delivery system that have disrupted the ability for some users‘ authentication codes to come through. It‘s unclear exactly what is causing Twitter‘s SMS problems or how long it will take to fully resolve them.
The Risks of Relying on SMS 2FA
This incident highlights some of the potential downsides and risks associated with using SMS-based two-factor authentication. While SMS 2FA is still better than having no second authentication factor at all, security experts generally consider SMS to be the least secure method of 2FA.
SMS messages can be intercepted, and phone numbers can be hijacked via SIM swapping attacks. Relying on telecoms and mobile carriers also introduces additional points of failure, as this Twitter issue demonstrates.
Alternative 2FA methods like Time-based One-Time Password (TOTP) authenticator apps or hardware security keys are considered more secure and resistant to common attacks. They also avoid reliance on mobile networks for delivering codes.
If you have the option to switch away from SMS 2FA on any of your accounts, most security professionals recommend doing so. However, any form of 2FA is better than not having it enabled at all.
Steps to Regain Account Access
So what can you do if you find yourself locked out of your Twitter account because of SMS authentication problems? Here are a few steps you can try:
Check your blocked numbers settings. The process for viewing and managing blocked numbers can vary depending on your device and mobile carrier.
- On iPhones:
- Go to Settings > Phone > Blocked Contacts
- Check for the 40404 number and unblock it if listed
- On Android:
- Open the built-in Messages app
- Tap the menu icon and select Blocked Numbers
- If 40404 is listed, tap the X icon to unblock
- Contact your mobile carrier if you need assistance managing blocks.
- On iPhones:
Turn off SMS 2FA if you have account access elsewhere. If you are still logged into your Twitter account on another device, like your laptop, you may be able to switch off SMS-based 2FA until the code delivery issues are resolved.
- Log in to Twitter.com on a web browser
- Go to Settings > Security and Account Access > Security
- In Two-Factor Authentication, select Edit and disable the Text Message option
- Consider switching to an authenticator app or security key instead
Contact Twitter Support. Let Twitter know you are having trouble receiving SMS authentication codes by filling out a support request form with details about your issue. Be aware that response times may be delayed due to the influx of similar reports.
Have patience and monitor the situation. Unfortunately, if the SMS issue is on Twitter‘s end, there may not be much more you can do individually to resolve it. Keep an eye out for updates from Twitter about the status of the outage and estimated fix times.
Twitter‘s Troubled Track Record on Security and Reliability
This recent SMS authentication snafu is just the latest in a series of technical and security-related issues to plague Twitter. The platform has been battling a massive spam problem, with researchers estimating that bots and fake accounts could make up a significant portion of Twitter‘s active users.
There have also been several high-profile security breaches, including a major hack in July 2020 that compromised 130 celebrity and politician accounts. Attackers were able to tweet out bitcoin scams from the official verified accounts of personalities like Elon Musk, Bill Gates, and Joe Biden.
Twitter has faced criticism for perceived mishandling of security incidents and failure to promptly and transparently communicate with users about threats. The company has launched various initiatives aimed at enhancing platform integrity and cracking down on misinformation and spam, but the problems persist.
Coupled with recurrent reports of outages, site instability, and broken features, many users are expressing eroded trust in Twitter‘s technical competency and ability to safeguard their data and accounts. A 2021 survey by ExpressVPN found that 63% of respondents were concerned about their privacy on Twitter.
User Reactions and Impact
For many locked-out users, losing access to their Twitter accounts is more than a minor inconvenience. Small businesses, freelancers, journalists, and public figures often rely on Twitter as a primary means of communication, marketing, and networking.
One startup owner tweeted:
"I depend on Twitter to reach customers and drive traffic to my site. Every day I‘m locked out of my account is lost income for my business."
A journalist lamented:
"As a reporter, Twitter is an essential tool for connecting with sources, colleagues, and monitoring breaking news. Being cut off from my account seriously disrupts my ability to do my job effectively."
For those who have built up a substantial following and use Twitter as a means of growing their brand or influence, an inability to post or engage on the platform can be detrimental.
Even for more casual users, abruptly losing access to their Twitter communities and networks can be distressing, particularly given the lack of clear communication and timelines from Twitter about resolving the issue.
Protecting Your Twitter Presence
Whether or not you are directly impacted by the current SMS authentication problems, this incident serves as an important reminder for all Twitter users to review their security settings and practices. Some tips to help safeguard your account:
Enable 2FA using an authenticator app or security key instead of SMS if available. This provides a more secure way to verify your identity and access your account.
Make sure your account information is up to date, including the email address and phone number associated with your Twitter account. Having accurate contact info on file is crucial in case you need to go through an account recovery process.
Check your account‘s logged-in devices and sessions regularly. Revoke access for any unfamiliar or suspicious logins.
Use a strong, unique password and consider storing it in a secure password manager. Avoid reusing the same password across multiple accounts.
Be cautious of suspicious DMs and emails claiming to be from Twitter. Phishing attempts often masquerade as official communications. Always navigate directly to Twitter.com to log in rather than clicking on links.
The SMS code delivery failures are especially disruptive and concerning given that they undermine the very security feature intended to protect user accounts and keep out unauthorized access.
A secure login process is fundamental to user trust in a platform that handles immense amounts of personal data, communications, and public discourse. These ongoing issues call into question Twitter‘s capacity to fulfill its most basic responsibility of ensuring users can safely and reliably access their accounts.
Looking Forward
As Twitter works to resolve the immediate crisis of SMS authentication failures, it will also need to take a hard look at the systemic vulnerabilities and weaknesses across its security and technical infrastructure that have allowed these problems to proliferate.
Implementing more secure and resilient authentication methods, improving communication and support channels, and investing in upgrading legacy systems could help address some of Twitter‘s long-standing platform stability and security woes.
Ultimately, Twitter will need to take concerted action to rebuild user trust and provide a more seamless and secure experience on the platform. Healthy public conversation and engagement on Twitter depends on users feeling confident in the integrity of the network and the competency of its stewards.
In the meantime, affected users will need to remain patient as they attempt to work with Twitter support to regain access to their accounts. Individuals and organizations should also take this opportunity to re-evaluate their own security practices and develop contingency plans for scenarios where access to essential social media accounts is disrupted.
By learning from these incidents, implementing more robust security measures, and striving for greater transparency and accountability, Twitter has an opportunity to set a new standard for responsible and reliable social media services – an imperative for the increasingly indispensable role these platforms play in our digital lives.
