"The grey checkmark indicates that an account represents a government/multilateral organization or a government/multilateral official. Eligibility criteria to receive a complimentary grey checkmark are listed below. Additional government and multilateral accounts can receive grey checkmarks through Verified Organizations.
Eligible government organizations at the national level may include: Main executive office accounts, agency accounts overseeing specific areas of policy, main embassy and consulate accounts, and parliamentary or equivalent institutional and committee accounts. Eligible government organizations at the state and local level include: Main executive office accounts and main agency accounts overseeing crisis response, public safety, law enforcement, and regulatory issues.
Eligible government individuals may include: Heads of state (presidents, monarchs and prime ministers), deputy heads of state (vice presidents, deputy prime ministers), national-level cabinet members or equivalent, the main official spokesperson for the executive branch or equivalent, and individual members of all chambers of the supranational or national congress, parliament, or equivalent.
Eligible multilateral organizations may include: the main headquarters-level, regional-level, and country-level institutional accounts. Eligible multilateral individuals include: The head and deputy-head or equivalent of the multilateral organization.
US only: Accounts of current US state governors and senior military leaders are also eligible.
Eligible accounts may apply here. (link)
Any government or multilateral accounts that do not qualify under our current grey checkmark criteria can see if they’re eligible under our Verified Organizations feature."
Lol, I can't believe this is really what they ended up with: multicolored stars to indicate different things? I thought it was a joke at first, but no, that's really how it works now. What a strange world...
They used to have blue check marks which was this exclusive thing that meant that someone was important enough to have been verified. Then Elon decided to start selling blue check marks for money, so now there are apparently a bunch of different colored check marks that you need to keep track of and know the meaning of.
Whereas it used to be just. Blue check mark = this is probably the real person I think it is.
(But in this case it don’t matter anyway. They were hacked and even if we still had only blue check marks their account would have been hacked all the same.)
to be fair in the app you can click on the badge and it will tell you what it means
but really it'd be better if they didn't, since it opens them up to liability, "the website said this is a government account and they verified it, what do you mean someone was impersonating the SEC"
"We continue to be committed to keeping people safe and secure on Twitter, and a primary security tool we offer to keep your account secure is two-factor authentication (2FA). Instead of only entering a password to log in, 2FA requires you to also enter a code or use a security key. This additional step helps make sure that you, and only you, can access your account. To date, we have offered three methods of 2FA: text message, authentication app, and security key.
While historically a popular form of 2FA, unfortunately we have seen phone-number based 2FA be used - and abused - by bad actors. So starting today, we will no longer allow accounts to enroll in the text message/SMS method of 2FA unless they are Twitter Blue subscribers. The availability of text message 2FA for Twitter Blue may vary by country and carrier.
Non-Twitter Blue subscribers that are already enrolled will have 30 days to disable this method and enroll in another. After 20 March 2023, we will no longer permit non-Twitter Blue subscribers to use text messages as a 2FA method. At that time, accounts with text message 2FA still enabled will have it disabled. Disabling text message 2FA does not automatically disassociate your phone number from your Twitter account. If you would like to do so, instructions to update your account phone number are available on our Help Center.
We encourage non-Twitter Blue subscribers to consider using an authentication app or security key method instead. These methods require you to have physical possession of the authentication method and are a great way to ensure your account is secure."
(I don't have an account, cannot confirm current state of MFA auth story)