Secure a company X account by protecting its recovery email, using a unique password and an available second factor, limiting third-party and staff access, and treating unexpected login links or password requests as suspicious. If the account shows signs of compromise, change the password, secure the email account, revoke unfamiliar app access, and review recent activity.
Build a secure login and recovery setup
Use separate, strong passwords
Give the X account a strong password that is not used anywhere else. Protect the email address associated with the account just as carefully: X identifies that email as directly related to account security, so give it its own unique password and keep access private. A password manager can generate and store distinct passwords; X names 1Password and LastPass as examples in its account-security guidance.
Enable a second factor the account can use
X documents text message, an authentication app, and a security key as two-factor authentication methods. Its two-factor authentication guidance says SMS two-factor authentication stopped being available to non-Premium subscribers on March 20, 2023. For Premium subscribers, SMS availability may depend on country and carrier. Check the company account’s own security settings for the options currently offered rather than assuming SMS is available.
| Method | What to consider |
|---|---|
| Authentication app | Requires access to the device running the app; plan recovery if that device is lost or replaced. X lists this as a two-factor method. |
| Security key | Requires a compatible physical key to be available at sign-in. X lists security keys as a two-factor method; confirm the key works with the devices and account before relying on it. |
| Text message | Availability is limited: X says non-Premium subscribers lost SMS two-factor authentication on March 20, 2023, and Premium availability can vary by country and carrier. |
X does not publish a comparative security ranking for these methods. Choose an option actually offered to the account and make sure the team has a recovery plan if the enrolled phone, app, or key becomes unavailable.
Recommended Free Tools
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Consider a passkey where supported
X says passkeys are available on iOS and Android. Its passkey documentation describes WebAuthn public-key cryptography: the device creates a public/private key pair, X stores the public key, and the private key stays on the device. To enroll, X’s documented path is Settings and privacy → Security and account access → Security → Passkey; sign in and confirm the account password when prompted. The documented availability is for iOS and Android, not every platform.
Reduce phishing and access risks
Check where a sign-in link leads
Before entering credentials, check that the base domain is x.com. If a message or page makes a link seem urgent or unusual, do not use it to sign in; navigate directly to x.com instead. X says it will not ask for a password by email, Direct Message, or reply: “X will never ask you to provide your password via email, Direct Message, or reply.”
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Limit third-party and team access
Review connected apps and revoke access for any third-party app the company does not recognize or no longer needs. For accounts using X Pro teams, periodically inspect the members list and remove unknown users. Give account access only to staff who need it, and avoid sharing credentials in response to unsolicited requests.
Recognize signs that the account may be compromised
X identifies these as possible warning signs:
- Posts, Direct Messages, or other account actions the team did not make.
- Notifications about account changes no one authorized.
- The account password no longer works.
One sign alone does not establish how the account was accessed, but it warrants prompt review of credentials, connected apps, and account activity.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Respond to a suspected takeover
- Change the X password immediately. Use a new password that has never been used before.
- Secure the associated email account. Change its password if needed, ensure it is unique, and check that only authorized people can access it.
- Revoke unfamiliar third-party app connections. Review the account’s connected apps in settings and remove access you cannot verify.
- Review recent account activity and account details. Look for unfamiliar posts, messages, actions, or changes and address anything unauthorized.
- Check X Pro team membership if applicable. Remove any member the company does not recognize.
- Contact X support if locked out after a password reset. X advises using the email associated with the account and including the username and the last date the account was accessible.
A password change does not automatically log the account out of X for iOS or Android. Review connected app access as part of the response; X says an app that remains connected may prompt for the new password.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.If unauthorized activity continues
If suspicious activity persists after account recovery, investigate devices and networks used to access the account. X advises scanning computers for viruses and malware, installing operating-system and application security patches, and considering whether credentials were exposed through a malicious third-party app or site, a weak or reused password, malware, or a compromised network. Its compromised-account guidance and platform authenticity guidance discuss these risks. If a device may be infected, avoid signing back in from it until it has been checked and updated.
Quick Recap
Best Value
- POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
