How to recover a hacked X (Twitter) account

X lists these signs:

• Posts from your account you didn't write
• Direct Messages you didn't send
• Follows, unfollows or blocks you didn't make
• A notification from X that your account may be compromised, or that its details changed when you didn't change them
• Your password no longer works and you're asked to reset it

Source: X Help Center: Help with my compromised account, checked 15 October 2026

Changing your password doesn't log out the X apps on phones. Sign in on the web, go to Apps in settings and revoke the app's access; it will ask for the new password next time it opens.

1. Change your password from the Password tab in settings. If you're logged out, select Forgot password on the login page. Use a strong password you haven't used before.
2. Make sure the account's email address is secure and only you can access it. If X emails you about an email address change you didn't make, use the link in that email to reverse it.
3. Go to Apps in your settings and revoke access for any third-party app you don't recognise.
4. Update your password in any trusted app that uses it, or failed logins may lock you out temporarily.
5. If you still can't log in, submit a support request from the email address linked to the account, with your username and the date you last had access.

Source: X Help Center: Help with my compromised account, checked 15 October 2026

• Turn on two-factor authentication, so a password alone can't open the account
• Scan your computers for viruses and malware, especially if unwanted posts continue after a password change
• Use a strong password you don't use anywhere else
• If you use teams in X Pro, check the members list and remove anyone you don't recognise
• Require your email address or phone number to start a password reset if you keep getting reset emails you didn't request
• Our suggestion: delete any posts the attacker sent, and post a short note if customers may have seen them

Sources: X Help Center: Help with my compromised account, checked 15 October 2026; X Help Center: How to use two-factor authentication, checked 15 October 2026

X says accounts are usually compromised through a malicious app or website you gave your username and password to, a weak password, malware collecting passwords, or a compromised network. Unexpected activity isn't always a hack: a buggy third-party app can cause it, and changing your password or revoking the app stops it either way.

Source: X Help Center: Help with my compromised account, checked 15 October 2026

Don't pass the password around. X's Delegate feature lets the owner invite people as admins or contributors, who can post, reply and schedule without the password. Only the owner manages the password, phone number and login verification settings, and X says owners are responsible for what delegates post.

Source: X Help Center: How to use the Delegate feature, checked 15 October 2026

• Locked out after too many attempts: wait, and update the password in every trusted app so old logins stop failing
• No access to the account's email: X has separate guidance for lost email access, and sends support instructions to the address linked to the account
• Unwanted posts keep appearing after a reset: revoke all third-party apps and scan for malware
• Deactivating won't help: X says deactivating and reactivating doesn't fix a compromised account

Sources: X Help Center: Help with my compromised account, checked 15 October 2026; X Help Center: How to deactivate your account, checked 15 October 2026

After a scare, a quiet account looks suspicious to customers. Zolyp plans, writes and schedules your X posts so the feed gets back to normal quickly, and you approve the week in minutes. There's a 3-day free trial, no card required.