Short answer
If you can still log in, change your password, make sure the email address on the account is secure and only yours, and revoke access for any connected app you don’t recognise — the steps X lists for compromised accounts. Then turn on two-factor authentication and delete posts made in your name. If you are locked out, request a password reset; if the email and phone were changed, contact X support through its Help Center forms.
Signs of a compromised account
- Posts, reposts, likes or messages you didn’t make.
- Your password, email, phone number or username changed.
- Notices about logins from unfamiliar places.
- The account was locked or limited because of suspicious activity.
If you can still log in
- Change your password in Settings and use one you don’t use anywhere else.
- Secure the email account linked to X — change its password too.
- Under the apps and sessions settings, revoke every third-party app you don’t recognise and log out of unknown sessions.
- Turn on two-factor authentication, preferably with an authenticator app or security key.
- Delete unauthorised posts and check your bio and links.
If you are locked out
- Request a password reset using every email address and phone number that may still be linked.
- If the attacker changed them, use X’s Help Center forms for hacked or compromised accounts and log-in issues.
- If the account was locked for suspicious activity, follow the on-screen steps — often confirming a phone number or completing a challenge.
- If the attacker deactivated the account, X’s reactivation help tells you how to contact support.
Hacked, locked or suspended?
A locked account can usually be unlocked by you. A suspended account is an enforcement decision and needs an appeal — see X account suspended. If spam posted by the attacker led to a suspension, say clearly in the appeal that the account was compromised and what you have changed since.
When the self-service routes fail
Accounts with value — a brand, a verified creator, an executive — are worth a documented case rather than repeated forms. Our hacked account recovery service prepares it through X’s official channels; we never ask for your password.
Frequently asked questions
How do I contact X support about a hacked account?
Through the forms in the X Help Center for compromised accounts and log-in issues. X handles these cases online.
Will X restore posts the hacker deleted?
Generally not. Recovering access is the priority; deleted content is usually gone.
The hacker posted crypto scams from my account. What now?
Delete them, warn your followers from another channel and keep screenshots in case you need to report it.
Why was my account locked after I got it back?
X locks accounts that show suspicious activity. Follow the on-screen steps to unlock it.
Sources: X Help Center — help with my compromised account, X Help Center — locked or limited accounts