Email address update alerts
Any time the email address associated with your X account is changed, we will send an email notification to the previously-used email address on your account. In the event your account is compromised, these alerts will help you take steps to regain control of your account.
Evaluating links on X
Many X users post links using URL shorteners, like bit.ly or TinyURL, to create unique, shortened links that are easier to share in posts. However, URL shorteners can obscure the end domain, making it difficult to tell where the link goes to.
Some browsers, like Chrome and Firefox, have free plug-ins that will show you the extended URLs without you having to click on them:
In general, please use caution when clicking on links. If you click on a link and find yourself unexpectedly on a page that resembles the X login page, do not enter your username and password. Instead, go to X.com and log in directly from the X homepage.
Keep your computer and browser up-to-date and virus-free
Keep your browser and operating system updated with the most current versions and patches—patches are often released to address particular security threats. Be sure to also scan your computer regularly for viruses, spyware, and adware.
If you're using a public computer, make sure you sign out of X when you're done.
Select third-party applications with care
There are many third-party applications built on the X platform by external developers that you can use with your X account(s). However, you should be cautious before giving third-party applications access to your account.
If you wish to grant a third-party application access to your account, we recommend that you only do so using X’s OAuth method. OAuth is a secure connection method and doesn’t require you to give your X username and password to the third party. You should be particularly cautious when you're asked to give your username and password to an application or website, as third-party applications don’t need your username and password to be granted access to your account via Oauth. When you give your username and password to someone else, they have complete control of your account and can lock you out or take actions that cause your account to be suspended. Learn about connecting or revoking third-party applications.
We suggest you review third-party applications that have access to your account from time to time. You can revoke access for applications that you don't recognize or that are posting on your behalf by visiting the Applications tab in your account settings.