How to turn on two-factor authentication on X (Twitter)

With two-factor authentication (2FA) on, logging in takes your password plus a second check: a code, a login confirmation through an app, or a physical security key. Someone who steals your password still can't get in. X also makes sure you have a confirmed email address while you enrol.

• Authentication app: any time-based one-time password (TOTP) app, such as Google Authenticator, Authy, Duo Mobile or 1Password
• Security key: a physical key over USB, Bluetooth or NFC. It can be your only method
• Text message: since 20 March 2023 only for X Premium subscribers, and availability varies by country and carrier

Source: X Help Center: How to use two-factor authentication, checked 15 October 2026

On x.com:

1. In the side menu, click More, then Settings and privacy.
2. Click Security and account access, then Security.
3. Click Two-factor authentication and tick Authentication app.
4. Read the overview and click Start. If asked, enter your password and click Verify.
5. If X asks you to confirm an email address, enter it and type in the code X emails you.
6. Scan the QR code with your authentication app and click Next.
7. Enter the code from the app, click Verify, then Got it.

• In the app: from the main menu tap Settings and privacy, then Security and account access, Security and Two-factor authentication, and follow the same prompts

Source: X Help Center: How to use two-factor authentication, checked 15 October 2026

• Security key: choose Security key, enter your password, click Start, then insert the key or connect it over Bluetooth or NFC and touch its button
• Keys appear under Manage security keys, where you can rename, delete or add more. On a computer you need the latest version of a supported browser such as Chrome, Edge, Firefox, Opera or Safari
• Text message (Premium only): tick Text message, enter your password, add a phone number if asked, then enter the code X texts you
• Whichever method you choose, save the backup code X shows on the confirmation screen

Source: X Help Center: How to use two-factor authentication, checked 15 October 2026

• A backup code gets you in if you lose your phone or change your number. X creates one when you turn on 2FA in the app, and you can make a new one in the app under Settings and privacy, Account, Security, Backup code
• You can have up to five active backup codes. Use them in the order you made them: using one out of order cancels the earlier ones
• Backup codes only work on X itself. For a third-party app that asks for your X password, use a temporary password instead
• To make a temporary password: Settings and privacy, Security and account access, Two-factor authentication, then Temporary password under Additional methods

Sources: X Help Center: Help with two-factor authentication, checked 15 October 2026; X Help Center: How to use two-factor authentication, checked 15 October 2026

• Lost phone: log in with a backup code, then update your settings. No backup code and logged out? Contact X support
• New phone: back up the old one first so the app session carries over. On iPhone, X recommends an encrypted backup, since iCloud backups alone usually don't keep the key
• Text code not arriving: wait at least two minutes, check your phone number is up to date, or use the Login code generator in the app under Settings and privacy, Account, Security
• Backup code rejected: it's inactive or used out of order. Generate a new one
• To turn 2FA off: go back to Two-factor authentication and untick (or switch off) your method

Sources: X Help Center: Help with two-factor authentication, checked 15 October 2026; X Help Center: How to use two-factor authentication, checked 15 October 2026

Don't pass the password around. X's Delegate feature lets you invite people as admins or contributors, so they can post, reply and schedule for the account without knowing the password, while only the owner manages the password, phone number and login verification. To set it up on x.com:

1. Log in to the account you want to share.
2. Click Your account, then Security and account access, then X Delegate, then Invite a member.
3. Type the person's name or @username and choose contributor or admin.
4. Click Send invite. They accept from Delegate on x.com.

• X's other advice: use a strong password of at least 10 characters that you don't use anywhere else, turn on Password reset protection, and check you're on x.com before you type your password
• X says it will never ask for your password by email, Direct Message or reply
• The account owner is responsible for what admins and contributors post

Sources: X Help Center: How to use the Delegate feature, checked 15 October 2026; X Help Center: About account security, checked 15 October 2026

Turning on 2FA protects your login. Zolyp publishes to X through the account you connect, and if a connection expires or a publish fails, it shows you the fix you need. There's a 3-day free trial, no card required.