Why Twitter Accounts Get Locked (And How to Avoid It in 2026)

The short version: Twitter, now X, locks accounts mostly because of automated or automation-shaped behaviour, not because of what you say. Rapid following, third-party apps with write access, sudden spikes in likes or DMs, and unverified logins from new devices are the main triggers, and most of them are entirely within your control. The fix is boring, unglamorous, and works: slow down, verify your phone and email, and stop handing your login to apps you haven't checked.

What "locked" means (and why people confuse it with a ban)

A lock is not a suspension. A suspension is X deciding your account shouldn't exist. A lock is X saying "we're not sure this is really you, prove it." You'll usually see a message asking you to confirm your phone number, solve a captcha, or delete some tweets before you get full access back. It's temporary in most cases, but temporary can still mean days, and for a business account that runs client campaigns, days matter.

I've had clients panic and assume they've been banned for life over a lock that lifted in twenty minutes once they added a phone number. I've also seen a lock drag on for eleven days because the account had no phone number on file at all and support needed extra proof of identity. The difference between those two outcomes usually comes down to boring admin you did or didn't do months before the lock happened.

The real reasons accounts get locked

Here's what trips the system, based on what I've seen across my own accounts and dozens of client accounts over the years.

• Aggressive following and unfollowing. Following more than roughly 100 to 150 accounts in a short burst, especially with even, machine-like timing, reads as bot behaviour to X's spam detection.
• Third-party apps with write access. Any app you've connected that can post, follow, or like on your behalf is a risk. If that app gets compromised or starts behaving oddly, your account takes the hit, not the app.
• Sudden spikes in identical activity. Liking 40 tweets in two minutes, sending the same DM to 30 people, or tweeting the same link across several accounts you manage from one browser.
• Login from a new device or country without warning. Log in from a hotel Wi-Fi in a different country and X will often lock the account first and ask questions second.
• Reports from other users. Even false ones. Enough reports in a short window and X locks first, reviews later, sometimes much later.
• Age or identity verification issues. If you've never confirmed your age or identity and something about the account gets flagged, you can be asked to submit ID before the lock clears. I've written a full breakdown of how Twitter age verification works for businesses, and it's worth reading before you're forced to deal with it under pressure.
• Copyright or DMCA flags. Repost someone else's image or video without permission and get reported, and a lock can follow even if you had no idea it was theirs.

My own lock out story

I got locked out of my own account using, of all things, a free tool designed to tell me who wasn't following me back. It asked for permission to read my account, which seemed harmless, but the permission it requested included the ability to interact on my behalf, and within an hour of connecting it, my account had auto liked a batch of tweets I never chose. X flagged the pattern as spam and locked me out until I removed the app and verified my phone number again. I wrote the whole thing up in detail in this piece on free tools to check who isn't following you back, mainly because I was annoyed enough at myself to want other people to skip the mistake.

The lesson wasn't "don't use tools." It was "read the permission screen before you tap allow," which takes about ten seconds and which almost nobody does.

The bit nobody likes admitting

Here's the part that most guides on this topic skip over. Appealing a lock on a small business account rarely gets a fast human response. X's support volume is enormous and a verified account with a blue checkmark and a paid subscription tends to move up the queue faster than an unverified one, even when the unverified account has done nothing wrong. I'm not saying that's fair. I'm saying it's how it works, and building your prevention habits assuming nobody is coming to rescue you quickly is a far more useful strategy than hoping the appeal form saves you.

That's also why identity matters more on X now than it used to. Verification isn't just a status symbol, it's proof of who you are that speeds up every dispute afterward. If you're weighing up whether to verify, it's worth understanding what X does with your ID once you submit it, because the data handling question comes up constantly with clients who are nervous about uploading a passport photo to a platform.

Step by step: how to avoid getting locked

This is the exact routine I run on every account I manage, mine and clients':

1. Add a phone number and a backup email before you need them. An account with both attached recovers from a lock in minutes rather than days, almost every time.
2. Cap follows at 40 to 50 a day, spread out. Don't follow them all in one sitting. Space it across a few hours if you're growing a new account.
3. Audit connected apps every three months. Go to settings, security and account access, connected apps, and remove anything you don't recognise or haven't used in the last month.
4. Never share login credentials across a team. Use X's built in team access features instead of five people logging into one password. Shared logins from different locations are one of the fastest ways to trigger a "suspicious login" lock.
5. Slow down DMs to strangers. Sending the same pitch to 20 new accounts in a day looks identical to spam software. Ten a day, personalised, is safer and honestly performs better anyway.
6. Verify your identity proactively if you run a business account with any following. Waiting until a lock forces your hand means you're uploading ID under time pressure with a client campaign stalled.
7. Log in from the same one or two devices where possible. If you must travel, log in on your phone first over your normal mobile data before switching to unfamiliar Wi-Fi.

None of that is complicated. It's just unglamorous, which is exactly why most people skip it until the day it costs them.

Third-party tools worth trusting versus the ones that lock you out

Not every tool is a risk. The difference is what permission it asks for. A tool that only reads your data, for example something you'd use to track industry conversations through a Twitter aggregator, is generally safer because it never touches posting or following on your behalf. The moment a tool asks for write access, meaning it can post, like, or follow as you, treat that request as a genuine decision, not a formality you click through.

I check three things before connecting anything now: what permission level it's asking for, how recently it was updated, and whether it has a real support page rather than just a Discord link. That three step check takes two minutes and has saved me from at least one more lockout since the DM incident.

What to do if you're already locked out

Straight answer: confirm your phone number the moment the lock screen appears, since that alone resolves the majority of locks within the hour. If it asks for ID, submit a clear photo straight away rather than waiting, because delays in verification are the single biggest reason locks stretch from hours into days. If none of that clears it, use the official appeal form and be specific and factual, not emotional, about what happened.

While you wait, don't create a second account to keep posting. New accounts created during a lock often get scrutinised harder, because that pattern matches what ban evaders do, and you don't want your clean account guilty by association with a rushed replacement.

Why the wider trust problem matters here too

Account locks sit inside a bigger pattern of X quietly changing how much it trusts an account. The same trust signals that trigger a lock also affect smaller, less dramatic things, like why your DMs sometimes disappear without warning or why the platform occasionally forces a username change that catches brands off guard. Once you understand that X is constantly scoring accounts on trust rather than judging each action in isolation, the lock stops feeling random and starts feeling like a predictable outcome of specific habits.

Why is Twitter hiding my replies? I've explained how hidden replies work on Twitter. I've rounded up the best Twitter features for marketing that many people skip.

Frequently asked questions

Why did my Twitter account suddenly get locked with no warning?

The most common causes are a burst of following or liking activity, a login from a new device or location, or a report from another user, and X locks first and asks for verification second rather than reviewing before acting.

How long does a Twitter account lock usually last?

Most locks clear within minutes to a few hours once you verify your phone number, but locks requiring ID verification can take several days to over a week if support queues are backed up.

Can a locked Twitter account be permanently lost?

Rarely, a lock is temporary by design, but if you ignore the verification request for long enough or the underlying issue is judged serious, a lock can escalate into a full suspension.

Do third-party apps really cause account locks?

Yes, any app you've granted write access to can post, like, or follow on your behalf, and if that activity spikes suddenly it gets flagged as bot-like behaviour even though you never clicked a single button yourself.