If you’ve recently been logged out of your Twitter account after trying to change your password, don’t be alarmed — yet. Twitter just revealed it logged some users out of their accounts when addressing a bug that prevented people from logging out themselves.
The bug, that’s thought to have been circulating for around a year, has now been fixed. However, if you fell victim to the vulnerability there’s a chance your private account information was accessed without your knowledge.
Switching your password regularly is normally an effective way to keep threats out of your Twitter, but to prevent bugs like this from affecting you in the future, we outline some other simple cybersecurity tips to help you stay safe on the platform.
Twitter Fixed a Bug That Prevented Users From Logging Out
In a blog post recently released by the company, Twitter disclosed an incident where a bug was preventing users from exiting their accounts on all devices. The vulnerability seemed to only affect users who tried to reset their passwords on one device, but still had one session open on another.
“In order to help ensure the safety and security of everyone that may have been affected, we’ve proactively logged people who may have been affected out of active sessions.” – Twitter's blog post
To rectify the damages, Twitter's team proactively logged users out of their accounts on all devices and prompted them to log back in. They have also directly informed the people that may have been impacted, and assured its user base that the issue has been resolved.
We fixed a bug that didn't close all active logged in sessions on Android and iOS after an account's password was reset. To keep your account safe, we logged some of you out. You can log back in to keep using Twitter.
For more details on what happened: https://t.co/OmjLKOe5bs
— Twitter Support (@TwitterSupport) September 21, 2022
While the social media giant hasn't officially released details about the bug, an insider believes it may have entered the system when the company changed its password reset system in 2021.
But what does this mean for those that fell victim to the vulnerability? Well, according to a Twitter spokesperson, “for most people, this wouldn't have led to any harm or account compromise”. However, experts believe this occurrence could have breached the privacy of some Twitter users, especially those that use shared devices or have lost a device within the last year.
How to Stay Safe on Twitter
Unfortunately, this isn't Twitter's first cybersecurity blunder. The Silicon Valley company also fell victim to a mammoth data breach in December 2021 that resulted in 5.4 million Twitter accounts being stolen.
To avoid your personal account from being met with the same fate, Twitter recommends adopting the following security measures:
- Refuse to give your logins to third parties
- Use two-factor authentication
- Download anti-virus software and update it regularly
- Use a strong password, and rely on password managers to remember them
If you believe you've fallen victim to Twitter's recent bug, the company is also advising its users to review their active open sessions regularly or to refer to their Help Center if extra support is needed.