Secure your X

1. Open X and sign in to your account.
2. Open Settings and privacy.
3. Open Security and account access.
4. Select Security.
5. Open Two-factor authentication.
6. Choose an available method such as an authentication app, text message or security key.
7. Follow the instructions to complete the setup.
8. Save your backup code somewhere secure if X provides one.

VERIFY: Return to the two-factor authentication settings and confirm that your selected method is shown as active.

1. Open X and sign in normally.
2. Open Settings and privacy.
3. Go to the account or password settings.
4. Choose the option to change your password.
5. Create a strong password that you do not use anywhere else.
6. Save it securely in a reputable password manager if appropriate.

VERIFY: Never give your X password to someone claiming that they can verify your account, increase your followers or recover your account.

1. Open Settings and privacy.
2. Open the account security settings.
3. Look for Password reset protection.
4. Turn the protection on if it is available for your account.
5. Follow any instructions X provides to confirm your email address or phone number.

VERIFY: Check that password reset protection remains enabled after you leave and return to the setting.

1. Open Settings and privacy.
2. Open Security and account access.
3. Open Apps and sessions.
4. Review the sessions listed under your active sessions.
5. Check the location, device and activity information where available.
6. If you find a session you do not recognize, log it out.
7. If necessary, choose the option to log out of other active sessions.

VERIFY: Do not assume an unfamiliar session is harmless. If you cannot explain it, secure the account before continuing.

1. Open Settings and privacy.
2. Go to Security and account access.
3. Open Apps and sessions.
4. Review the applications connected to your X account.
5. Check what permissions each application has.
6. Revoke access for applications you no longer use.
7. Revoke access for applications you do not recognize.

VERIFY: Be especially careful with services that ask for your X password directly. Where possible, use X's official authorization process instead of giving your password to another service.

1. Review recent notifications and security messages from X.
2. Look for alerts about new or unusual logins.
3. Confirm whether the device and activity were yours.
4. If you do not recognize the login, change your password.
5. Review active sessions and remove unfamiliar sessions.
6. Review connected applications for anything suspicious.

VERIFY: Treat an unexpected login alert as a signal to investigate, not as a notification to ignore.

1. Check which email address is connected to your X account.
2. Confirm that you still control that email account.
3. Make sure the email account has a strong, unique password.
4. Turn on multi-factor authentication for the email account.
5. Review the email account for unfamiliar recovery methods or login sessions.

VERIFY: Securing X while leaving the connected email account exposed can leave an important recovery path vulnerable.

1. Be suspicious of unexpected messages asking you to log in.
2. Do not enter your password into a page reached through a suspicious link.
3. Before signing in, check that you are on the legitimate X website or official application.
4. Be especially cautious of messages promising verification, followers, money or account recovery.
5. If you are unsure, open X directly instead of following the message's link.

VERIFY: A familiar-looking logo or message does not prove that the page is genuine.

1. Open your X account settings.
2. Review the email address associated with the account.
3. Review the phone number associated with the account, if one is present.
4. Confirm that you still control these recovery methods.
5. Update information you no longer control.
6. Never add another person's email address or phone number as a recovery method because they claim to be helping you.

VERIFY: Your recovery information should belong to you and remain accessible to you.

1. Never give your X password to another person.
2. Never give your two-factor authentication code to someone else.
3. Do not provide backup codes to someone offering to help.
4. Do not install unknown software because someone claims it is required to verify your account.
5. If an application needs access to X, review its permissions carefully before authorizing it.

VERIFY: Someone who knows your password or authentication code may be able to take control of your account.