You have to deactivate your account if you regain access for a few days and nuke everything associated with it.

Update with new contact details and possibly a new phone number you have stored away for online accounts that require it (No SMS 2FA obviously if it can be avoided)

Haven’t heard of a yubikey being compromised. That’s the last thing I would swap out if the above steps won’t work.

Reply to this note

Please Login to reply.

Discussion

I see a lot of people pointing to malware/key logger etc. maybe. My guess is that it’s an internal Twitter issue and why I’m suggesting to deactivate the account for a few days to see what happens.

If they can reactivate with all new account details it’s the post #[3]​ Twitter you guys love so much.