Victims of "account takeover" and "impersonation" are increasing. Especially those with high-value accounts, celebrities, and business users are likely targets. Please review your settings immediately.
You can complete this by opening the "Settings and Privacy" in the X app and checking each item in order. I have attached screenshots for the initial steps to make it as clear as possible, even if it feels a bit verbose, because some people might find it difficult.
Table of Contents (Note: There is no jump-to-section feature)
- (Common to all) Open "Settings" ① Stop reusing passwords ② Confirm recovery email address - The lifeline during an account takeover ③ Enable Two-Factor Authentication (2FA) ④ Add Passkeys ⑤ Clean up logged-in devices and connected apps ⑥ Prevent identity exposure (Only for those who need it) Caution regarding fake messages and scam links The 3 priority settings you should do first
0. First, open "Settings" (Common to all steps)
① Stop reusing passwords
Account ➜ Change Password
Never use the same password as other services.
Change to a "long and complex password" specifically for X. Using the "password save/auto-generate" feature on your smartphone or browser makes management easier.
🟥② Confirm Recovery Email Address
Account ➜ Account Information ➜ Email Address
Always confirm that it is an email address where you can still receive notifications.
This becomes the "lifeline" for recovery when you forget your password or during an account takeover. Secure this email itself with two-factor authentication or passkeys as well.
③ Enable Two-Factor Authentication (2FA)
Security and Account Access ➜ Security ➜ Two-Factor Authentication
Choose either "SMS" or "Authentication App" (e.g., Google Authenticator).
Note: SMS authentication is limited to paid plans (X Premium).
Be sure to write down the "Backup Codes" issued during setup on paper or store them in a safe place (this is the only rescue measure if you lose your phone).
④ Add Passkeys
Security and Account Access ➜ Security ➜ Passkeys
You will be able to log in using biometric authentication on your smartphone (Face ID or fingerprint), dramatically reducing the risk of having your password stolen by fake sites (phishing scams).
Note: Even after setting up passkeys, "login with password" remains, so 2FA from step ③ is also essential.
⑤ Clean Up Logged-In Devices and Connected Apps
Security and Account Access ➜ Apps and Sessions
(I omitted images from here on, assuming they are unnecessary at this stage.)
【Two checks here】
"Sessions": If there are unfamiliar devices or login histories, execute "Log out of all other sessions." (Note: Connection region displays may be inaccurate, so judge by device name and date/time.)
"Connected Apps": Select "Revoke access" for any past connected services or external tools you don't recognize. (Depending on permissions, these could post without permission or read DMs.)
⑥ Prevent Identity Exposure (Only for those who need it)
Privacy and Safety ➜ Discoverability and Contact Info
Turn off "Allow discovery by contact info" for email addresses and phone numbers.
Turn off "Sync contacts" if not needed, and delete previously synced data with "Delete all contacts."
Supplement: "Identity verification via ID" is also limited to paid users, but you probably don't want to upload identification documents now.
🚨 Finally: The Most Important Thing
Even if you receive emails or DMs saying "Your account will be suspended" or "Copyright violation detected," absolutely do not tap the links in the message. Always develop the habit of opening the official app or web browser yourself and checking the status from the settings screen. (Scam emails always contain elements designed to rush you.)
If you don't have time, please do at least 【①・②・③】 right now. If you have questions about the settings, please let me know in the comments.
Note: Some menu displays may vary depending on the app version or device.
Stay safe and continue enjoying a good X life.
