Good to know
1. Enable Two-Factor Authentication
- Settings → Security and account access → Security → Two-factor authentication
- Choose Authentication app (recommended) — SMS 2FA requires X Premium
- Save backup codes offline
2. Review Connected Apps
- Settings → Security and account access → Apps and sessions → Connected apps
- Remove apps you don't recognise or no longer use
- Revoke API access for old developer projects
3. Verify Contact Information
- Confirm email under Settings → Your Account → Account information
- Add a phone number for account recovery
- Enable password reset protection
4. Review Active Sessions
- Check Sessions under Apps and sessions regularly
- Log out of unrecognised sessions
- Check Account access history
5. Strengthen Your Password
- Use a unique password of at least 16 characters
- Never reuse elsewhere — use a password manager
- Enable Additional password protection
6. Privacy & Safety Settings
- Protect your posts if your account is personal
- Disable location information on tweets
- Review who can tag you in photos
- Filter DM requests from unknown accounts
- Disable discoverability by email/phone if desired
Important
Was this guide helpful?
Know someone who needs this? Send them the guide.
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers