Warning signs, security checks, and immediate steps to take.
Warning Signs Your X Account Is Compromised
- Login alert from an unfamiliar device or location
- Password no longer works
- Email or phone number changed without your knowledge
- Tweets, retweets, or DMs you didn't post
- Followers report spam messages from your account
- Unfamiliar apps connected to your account
- Your display name, bio, or profile picture changed
- Two-factor authentication disabled
How to Check for Unauthorised Access
1. Review Sessions
Go to Settings → Security and account access → Apps and sessions → Sessions. Review and log out of unfamiliar sessions.
2. Check Connected Apps
Under Apps and sessions → Connected apps, remove anything you don't recognise.
3. Review Account Access History
Check Account access history for login attempts and IP addresses you don't recognise.
Immediate Actions
- Change your password immediately
- Enable two-factor authentication
- Revoke all sessions
- Remove unfamiliar connected apps
- Verify email and phone number
- Delete any spam tweets or DMs sent by the hacker
Important
Can't log in? Go to help.x.com and select Hacked account. See: How to Recover Your X (Twitter) Account After Being Hacked.
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers