Published by the Zolyp team ·
What can a connected app do with your X account?
Apps using X's newer OAuth 2.0 method list their requests under Things this App can view and Things this App can do. X says it doesn't share your password with apps.
- Read: see your profile, your posts (including protected ones) and timeline, settings such as language and time zone, who you follow, mute and block, and your Lists
- Read and write: everything above, plus post and delete posts for you, like, reply and repost, follow and unfollow, and change your profile and settings
- Read, write and Direct Messages: also send, read and delete your DMs
- Email address: only if you grant that permission separately
- X Ads: access your ad data and, with management access, create and manage campaigns
Source: X Help Center: About third-party apps and log in sessions, checked 15 October 2026
How do you revoke an app's access?
X suggests reviewing this list regularly. Anything you don't recognise, or no longer use, should go.
- Sign in to your account.
- Open Settings and privacy and go to Apps and sessions.
- Review the apps listed. Each one shows its permissions under its name and description.
- Click Revoke access next to the app, or click the app's name and use the button at the bottom of the page.
Source: X Help Center: About third-party apps and log in sessions, checked 15 October 2026
How do you log out of other devices on X?
X notes that logging out a session stops new actions from it, such as posting, liking and replying, but may not delete data like Direct Messages already cached on that device. For the iPhone app, X also says you revoke the whole iOS integration rather than single entries such as X for iPhone.
- Open Settings and privacy and go to Apps and sessions.
- Under Sessions, review the active logins, with location and time.
- Click Log out next to a session, or Log out all other sessions at the top of the list.
Sources: X Help Center: About third-party apps and log in sessions, checked 15 October 2026; X Help Center: How to log out of the X app on an iOS device, checked 15 October 2026
How do you connect a new app safely?
X recommends only connecting apps through its OAuth method, which doesn't hand over your username and password. It warns never to give your login to sites promising more followers fast, or to apps that post affiliate ads to your timeline.
- In the app, choose the button such as Connect to X or Sign in with X.
- Read the permissions X shows you before agreeing.
- If you need to log in, check the page address starts with https://x.com before typing your details.
- Click Authorize app, or Cancel if you're not comfortable.
Source: X Help Center: About third-party apps and log in sessions, checked 15 October 2026
What if an app misbehaves?
- It posts or follows without you: revoke its access in Apps and sessions immediately and change your password
- You once gave an app your password: revoke it and change your password
- You suspect your account is compromised: follow X's compromised account steps (see our hacked account guide)
- The app itself isn't working: X says it can't troubleshoot third-party apps, so contact the app's developer
- A tool you rely on stops posting: it may have been revoked or need reconnecting from its own settings
Source: X Help Center: About third-party apps and log in sessions, checked 15 October 2026
Where does Zolyp fit? (Disclosure: Zolyp is our product)
Zolyp is one of the apps you'd see in this list once connected. If its access is revoked or expires, Zolyp flags the connection before a post fails, and you reconnect it from Connections. There's a 3-day free trial, no card required.
Common questions
Where are connected apps in X settings?
Under Settings and privacy, in the Apps and sessions section.
How do I log out of X on all devices?
In Apps and sessions, under Sessions, click Log out all other sessions.
Can a connected app read my DMs?
Only if you granted Read, write and Direct Messages access. Check the permissions shown under each app in Apps and sessions.
Does revoking an app delete what it posted?
X's help page doesn't say revoking removes past posts. Delete any unwanted posts yourself.
Do apps get my X password?
Not through OAuth. X says it doesn't share your password with apps, and warns against apps that ask you to type it in.