The Openness of X Makes Small Clues Easier to Amplify
Information flows rapidly on X, with extensive public interactions and quick sharing. The content you post may be seen, screenshot, searched, or shared by strangers; direct messages are not always trustworthy, and seemingly official notifications may be phishing attempts.
Check Identity and Location Clues Before Public Posts
Your current location, work or school information, frequently visited places, relationships with family and friends, contact details, other platform accounts, and addresses, license plates, or documents in photo backgrounds can all be pieced together. Before making a public post, consider: Does this content make it easier for strangers to determine my identity, location, or daily patterns?
Separate Verification for Direct Messages, Airdrops, and Account Notifications
If an unfamiliar direct message asks you to click a link to log in, provide verification codes or backup codes, download files, or join investment or airdrop activities, stop immediately. Brands, customer service, or platform security teams should not be trusted if they only request actions through direct messages.
Five Key Areas to Check in Account Settings
Check if your X password is unique, if two-factor authentication is enabled, if login activity looks normal, if email and phone are still accessible, and if third-party authorizations are excessive. Remove any external tools, event pages, analytics tools, and login services that you don't use or don't recognize.
Regain Control When Account Activity is Suspicious
If you notice unfamiliar logins, posts, shares, direct messages, or following behaviors, first change your password, log out from unfamiliar devices, check two-factor authentication, and confirm your email and phone number haven’t been altered, then remove any suspicious third-party authorizations. If necessary, inform friends not to click on suspicious messages coming from your account.
The key to X's safety focuses not just on platform features, but also on daily habits: share fewer clues that can be pieced together, don't log in through unfamiliar direct messages, don't provide verification codes, and regularly check login and authorization statuses.