About TweetAttacks

The site has two parts. On the homepage there is a security check that scores your X settings and turns the gaps into a to-do list, and a link explainer that takes apart a suspicious URL and shows what it really points to. Both run entirely in your browser. The guides go deeper on one attack at a time: phishing DMs, SIM swaps, stolen sessions, rogue connected apps, impersonation, team accounts and doxxing.

Defensive only

Everything here is written for the account owner. We describe how an attack works only in as much detail as you need to recognize it and shut it down. You won't find instructions for breaking into accounts, buying or selling them, automating fake engagement, or getting around X's rules, and we don't answer requests for that.

How we write the guides

The guides are written by the TweetAttacks Team. We check settings names and options against X's own help pages and test them in the app before publishing, and we date every guide. X renames menus fairly often, so when a path we give has moved, search the setting's name in the app, and tell us so we can fix it.

We don't sell anything, run ads, use affiliate links or take sponsored posts. No company reviews our articles before they go up.

What we will never ask for

We will never ask for your password, a login code, a backup code, a recovery phrase, or access to your account. Nobody from TweetAttacks will DM you on X offering to recover an account. If someone claims to be us and asks for any of that, it's a scam, and you can report the message to X.

Who we are not

TweetAttacks is independent and is not affiliated with, endorsed by or connected to X Corp. "X" and "Twitter" are trademarks of their owner and are used here only to describe the service our guides are about.

The tweetattacks.com domain was used by other people years ago. The site was relaunched in 2026 under new, independent management and has no connection to earlier owners of the domain or anything they published here.