WASHINGTON — President Donald Trump came within seconds of authorizing a nuclear strike late Friday after attempting to post on Truth Social and accidentally opening the Pentagon’s newly deployed Nuclear Authentication App, according to administration officials.
The incident occurred shortly after 1:30 a.m., when Trump reportedly picked up his iPhone intending to respond to what aides described as “something he had just seen on television.”
Instead, officials said, the president tapped an adjacent icon labeled NUCLEAR AUTHORIZATION. What followed was initially interpreted by Trump as an unusually aggressive login sequence.
The president successfully passed Face ID, entered a six-digit code sent to his phone, and completed a CAPTCHA asking him to identify all squares containing motorcycles.
“At no point did the system indicate to him that he was doing anything unusual,” said one White House official. “From his perspective, this was pretty much how every website works now.”
The alert was triggered when Trump reached the final screen, which was split in two. On the right was a checklist of his completed security steps, above a large red button reading:
AUTHORIZE LAUNCH
On the left was a box for entering the reason for the launch. To make the app feel familiar to the Commander in Chief, the contractor had modeled it on Truth Social’s compose window, with the same blue color scheme and the President’s profile photo. The only differences were that the header read Reason for Launch and the blue button underneath read Save.
Trump, who officials said did not read the header, dictated his message into the box:
“THE FAKE NEWS GLOBAL ELITES HAVE PUSHED US TOO FAR!!! IT’S TIME THEY LEARN WHAT REAL STRENGTH LOOKS LIKE. AMERICA FIRST ALWAYS!!!”
He then pressed Save several times. When his message failed to appear on Truth Social, he turned to the large red button on the other side of the screen, which officials said he apparently believed was the new Post button.
“He was annoyed that Truth Social had redesigned the interface again,” said an aide familiar with the incident.
Pentagon cybersecurity officials said the system reviewed the message as a launch justification and found the wording not unusual enough to trigger any automated safeguards.
The situation escalated after Trump pressed AUTHORIZE LAUNCH. The system immediately displayed:
ARE YOU SURE?
Trump selected YES.
A second prompt appeared:
THIS ACTION CANNOT BE UNDONE.
Trump again selected YES.
Administration officials emphasized that these confirmations were functioning exactly as designed.
“The user was warned twice,” said Secretary of War Pete Hegseth. “From a cybersecurity standpoint, that is considered extremely robust.”
Only one step remained: a final CAPTCHA asking him to SELECT ALL SQUARES CONTAINING STAIRCASES. Over three increasingly irritated attempts, Trump selected five squares, then seven, then every square on the screen. Each time, the system responded: PLEASE TRY AGAIN.
The system then offered the president another option: Having trouble? Verify your identity another way. Trump selected it, and was presented with a single security question:
WHAT WAS THE NAME OF YOUR FIRST PET?
Officials acknowledged that the pet question has not been fully tested, since the President has never had one.
Trump reportedly entered “TRUMP,” then “WINNER,” and finally “DOG.”
INCORRECT ANSWER. FOR YOUR SECURITY, THIS REQUEST HAS BEEN CANCELED.
At that point, Secret Service personnel entered the room after hearing the president repeatedly shout that the website was “rigged.”
Pentagon officials said the failed security question prevented an authentication token from being issued and automatically canceled the launch request.
Human civilization was therefore preserved by the President’s lifelong decision never to own a dog.
The White House later characterized the episode as a successful test of the administration’s new nuclear cybersecurity modernization program.
“This proves the system works,” Press Secretary Karoline Leavitt said at a morning briefing. “An unauthorized nuclear launch did not occur.”
Asked whether a launch initiated by the president could technically be considered unauthorized, Leavitt said reporters were “missing the point.”
Defense officials also rejected suggestions that placing nuclear launch authorization software on the same phone used for social media created unnecessary risk.
“That is precisely why we implemented two-factor authentication,” Hegseth said.
Hegseth acknowledged what he described as “a minor user interface design issue” involving the reason-for-launch screen’s resemblance to Truth Social. “The President did nothing wrong. Frankly, he navigated that app faster than most of our launch officers could,” Hegseth said. “There was a small design issue, nothing more, and it’s being addressed in the next software update.”
The Pentagon subsequently announced several immediate improvements. The Nuclear Authentication App icon will be moved from the president’s home screen into a folder labeled Utilities, where officials believe it will be significantly harder to access accidentally.
The launch button will also be changed from bright red to dark red.
Officials briefly considered renaming AUTHORIZE LAUNCH to something less ambiguous but concluded that doing so could confuse existing users.
Apple has additionally been asked to modify Siri so that the phrase “destroy them” does not automatically suggest opening the nuclear application.
Despite the incident, administration officials said Trump remains enthusiastic about the new system. Several hours later, he successfully posted his original message to Truth Social, then added:
“CAPTCHA IS A TOTAL SCAM. NOBODY CAN TELL WHAT THOSE PICTURES ARE. VERY UNFAIR!”
Pentagon officials confirmed Saturday morning that no nuclear weapons had been launched.
They also announced that the next software update will include a new security feature requiring users to type the words:
I UNDERSTAND THIS IS NOT SOCIAL MEDIA.
The update is expected to save an additional $4.7 million annually.