{"id":27400,"date":"2012-07-03T22:04:43","date_gmt":"2012-07-03T16:34:43","guid":{"rendered":"https:\/\/www.quickonlinetips.com\/archives\/?p=27400"},"modified":"2026-10-13T13:41:04","modified_gmt":"2026-10-13T08:11:04","slug":"twitter-password-security","status":"publish","type":"post","link":"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/","title":{"rendered":"Twitter Password Security: Stop Fake Reset Requests on X (2026)"},"content":{"rendered":"<p>Do you know how to increase Twitter password security? A while ago I kept getting password reset emails from Twitter that I had never requested. Anyone who knows your username can trigger them, and if that person also got into your email, they could reset the password and take over the account. Twitter is now X, but the risk is the same. Here is how to tighten <strong>Twitter password security<\/strong> in 2026.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-64128\" src=\"https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/twitter-x-password-security-1024x538.webp\" alt=\"Twitter password security on X\" width=\"1024\" height=\"538\" srcset=\"https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/twitter-x-password-security-1024x538.webp 1024w, https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/twitter-x-password-security-300x158.webp 300w, https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/twitter-x-password-security-150x79.webp 150w, https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/twitter-x-password-security-768x403.webp 768w, https:\/\/www.quickonlinetips.com\/archives\/wp-content\/uploads\/twitter-x-password-security.webp 1200w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/p>\n<p><strong>Quick answer:<\/strong> On X, open Settings and privacy &gt; Security and account access &gt; Security. Turn on <strong>Password reset protect<\/strong> so a reset needs your email or phone, turn on two-factor authentication with an authenticator app or security key, then review connected apps and logged-in sessions and remove anything you don&#8217;t recognise.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6ae4e078df7b3\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"ez-toc-cssicon\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #1a202c;color:#1a202c\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #1a202c;color:#1a202c\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6ae4e078df7b3\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#Why_you_get_password_reset_emails_you_didnt_request\" >Why you get password reset emails you didn&#8217;t request<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#How_to_improve_Twitter_password_security_on_X\" >How to improve Twitter password security on X<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#1_Turn_on_password_reset_protection\" >1. Turn on password reset protection<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#2_Add_two-factor_authentication\" >2. Add two-factor authentication<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#3_Use_a_strong_unique_password\" >3. Use a strong, unique password<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#4_Review_apps_and_sessions\" >4. Review apps and sessions<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#5_Keep_your_phone_and_email_up_to_date\" >5. Keep your phone and email up to date<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#If_your_X_account_was_hacked\" >If your X account was hacked<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#FAQ\" >FAQ<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#Can_someone_hack_my_Twitter_just_by_sending_a_reset_email\" >Can someone hack my Twitter just by sending a reset email?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#Is_SMS_two-factor_safe\" >Is SMS two-factor safe?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/07\/twitter-password-security\/#How_do_I_stop_the_reset_emails_completely\" >How do I stop the reset emails completely?<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Why_you_get_password_reset_emails_you_didnt_request\"><\/span>Why you get password reset emails you didn&#8217;t request<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>X&#8217;s &#8220;Forgot password&#8221; form asks only for a username, email or phone. Anyone can type your handle and X emails you a reset link. The email on its own is harmless: the link only works for someone who can read your inbox. But it is a warning sign that someone is targeting your account, and it shows why your email account must be secure too.<\/p>\n<ul>\n<li><strong>Don&#8217;t click<\/strong> reset links you didn&#8217;t ask for. Delete the email.<\/li>\n<li><strong>Check the sender<\/strong>: real emails come from x.com. Phishing copies ask you to &#8220;confirm&#8221; your password on a fake page.<\/li>\n<li><strong>Secure your email<\/strong> with a strong password and 2FA, because whoever controls your inbox can reset almost any account.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"How_to_improve_Twitter_password_security_on_X\"><\/span>How to improve Twitter password security on X<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"1_Turn_on_password_reset_protection\"><\/span>1. Turn on password reset protection<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>In <strong>Settings and privacy &gt; Security and account access &gt; Security<\/strong>, enable <strong>Password reset protect<\/strong>. X will then ask for your account&#8217;s email or phone number before sending a reset, which stops strangers from triggering resets with only your username. When I first linked a mobile phone to our account back in 2012, the same idea cut the fake requests.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"2_Add_two-factor_authentication\"><\/span>2. Add two-factor authentication<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>On the same Security screen choose <strong>Two-factor authentication<\/strong>. The authenticator app and security key options are available to all users; text-message codes are limited to X Premium subscribers. Save the backup code somewhere safe.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"3_Use_a_strong_unique_password\"><\/span>3. Use a strong, unique password<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Use a password manager to create a long password you don&#8217;t use anywhere else. Change it straight away if you used it on a site that was breached.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"4_Review_apps_and_sessions\"><\/span>4. Review apps and sessions<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ul>\n<li><strong>Apps and sessions &gt; Connected apps:<\/strong> revoke tools you no longer use, especially old follower trackers.<\/li>\n<li><strong>Sessions:<\/strong> log out of devices you don&#8217;t recognise.<\/li>\n<li><strong>Account access history:<\/strong> check recent logins and locations.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"5_Keep_your_phone_and_email_up_to_date\"><\/span>5. Keep your phone and email up to date<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>A verified email and phone make recovery much easier if you are locked out.<\/p>\n<p>For more X settings, see how to <a href=\"https:\/\/www.quickonlinetips.com\/archives\/2012\/05\/protect-privacy-on-twitter\/\">protect your privacy on Twitter<\/a> and grow <a href=\"https:\/\/www.quickonlinetips.com\/archives\/2010\/09\/get-quality-twitter-followers\/\">quality Twitter followers<\/a>.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"If_your_X_account_was_hacked\"><\/span>If your X account was hacked<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ol>\n<li>Try a password reset straight away.<\/li>\n<li>If the email was changed, look for the &#8220;email changed&#8221; message from X; it has a link to secure the account.<\/li>\n<li>Use X&#8217;s Help Center form for hacked or compromised accounts if you still can&#8217;t get in.<\/li>\n<li>Once back in, delete unwanted posts, revoke apps and turn on 2FA.<\/li>\n<\/ol>\n<h2><span class=\"ez-toc-section\" id=\"FAQ\"><\/span>FAQ<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Can_someone_hack_my_Twitter_just_by_sending_a_reset_email\"><\/span>Can someone hack my Twitter just by sending a reset email?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>No. They also need access to your email or phone. That is why securing your inbox matters as much as your X password.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Is_SMS_two-factor_safe\"><\/span>Is SMS two-factor safe?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>It is better than nothing, but SIM-swap attacks can intercept texts. An authenticator app or security key is safer.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"How_do_I_stop_the_reset_emails_completely\"><\/span>How do I stop the reset emails completely?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Turn on Password reset protect. Requests without your email or phone are then blocked before an email is sent.<\/p>\n<p><a href=\"https:\/\/x.com\/qot\" target=\"_blank\" rel=\"noopener\">Follow us on X<\/a> for more tips.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Do you know how to increase Twitter password security? A while ago I kept getting password reset emails from Twitter&#8230;<\/p>\n","protected":false},"author":4,"featured_media":64128,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[7,111],"tags":[49],"class_list":["post-27400","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-social-media","tag-tutorials"],"_links":{"self":[{"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/posts\/27400","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/comments?post=27400"}],"version-history":[{"count":3,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/posts\/27400\/revisions"}],"predecessor-version":[{"id":65450,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/posts\/27400\/revisions\/65450"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/media\/64128"}],"wp:attachment":[{"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/media?parent=27400"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/categories?post=27400"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.quickonlinetips.com\/archives\/wp-json\/wp\/v2\/tags?post=27400"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}