X (Twitter) Posting on Its Own? Remove Connected Apps and Log Out Other Sessions

If your X account is posting, following or sending DMs you didn’t, a connected app or another logged-in session may be the cause. X lets you see and remove both in Apps and sessions in your settings.

Quick answer

Go to Settings and privacy > Apps and sessions. Under connected apps, click Revoke access next to any app you don’t trust. Under Sessions, click Log out next to unknown devices, or Log out all other sessions. If you gave your X password to an app you’re now unsure about, X says to revoke it and change your password.

Does this match what you see?

  • Posts, replies, follows or DMs appear that you didn’t make.
  • Spammy or affiliate ads are being posted from your account.
  • You see logins from places or devices you don’t recognize.
  • You connected a follower-growth or tool app and now regret it.

iPhone & iPadAndroidComputer (browser)

Based on X Help Center “About third-party apps and log in sessions”, supplied by the site owner, October 31, 2026. Setting names can differ slightly between the app and x.com.

Why this happens: the possible causes

Why your account might act without you, from X’s page.

Unexpected activity on X
Possible causeWhat to do
A connected app with write accessRevoke its access
Still logged in on another deviceLog out that session
You gave an app or site your passwordRevoke it and change your password
A delegate or team memberCheck delegates
  • Connected third-party appCheck this first

    X says apps with read-and-write access can post, delete posts, like, repost, follow and unfollow for you; with Direct Message access they can send and delete DMs.

  • Another active sessionPossible

    X lists every active login session with its location and time, so you can end ones you don’t recognize.

Try these 60-second checks first

  • Open Settings and privacy > Apps and sessions and look at both the apps list and the Sessions list.
  • Remove anything you don’t recognize, then change your password if you ever typed it into an app or site.

How to fix it, step by step

Work through these in order. They start with the quickest, safest checks and only move to steps that sign you out or remove data later.

Fix 1: Remove a connected app

Safe & reversible2 miniPhone & iPadAndroidComputer (browser)

X says connected apps can use your account according to the permissions you gave them, and suggests reviewing them regularly.

  1. Sign in, then go to Settings and privacy > Apps and sessions.
  2. Look at the connected apps. X shows each app’s permissions under its name and description.
  3. Click Revoke access next to the app, or click the app’s name and use Revoke access at the bottom of the page.

Did it work? Our check: the app no longer appears in your list, and no new posts or follows appear that you didn’t make.

Fix 2: Log out of other sessions

Safe & reversible2 miniPhone & iPadAndroidComputer (browser)

X lists all active logins with their location and time under Sessions.

  1. Go to Settings and privacy > Apps and sessions > Sessions.
  2. Click Log out next to any session you don’t recognize, or Log out all other sessions at the top to end them all at once.

X says logging out stops further actions from that session, like posting, liking and replying, but may not delete data (such as DMs) already cached on that device.

Did it work? Our check: only your current device is left in the Sessions list.

You gave an app or website your X password

X recommends only connecting apps through its OAuth sign-in, which doesn’t share your password. If you gave your password to an app you’re now unsure about, X says to:

If a bad app may still be connected, X says do both immediately. If someone else is in your account, see can’t log in to X.

Connecting an app safely

  • In the app, use its Connect to X or Sign in with X button. You’ll see what the app wants to view and do; click Cancel if you’re not comfortable.
  • If you’re sent to an X web page to log in, X says check the address starts with https://x.com before typing your username and password.
  • Not sure a login page is real? X says go to x.com directly and log in there, then return to the app; a genuine OAuth app shouldn’t ask for your password again.

What a connected app can see and do

  • Read: X says an app with read access can see your profile, your posts and your timeline (including protected posts), your settings, who you follow, mute and block, and your Lists. Your email address and phone number aren’t part of your profile information, and X says an app can’t see your email address unless you give it separate permission.
  • Read and write: it can also update your profile, post, delete, like, reply and repost for you, follow and unfollow, and mute, block or report accounts for you.
  • Direct Messages: with this permission it can send, read and delete your DMs. X says deleting a DM only removes it from your account, not the other person’s.
  • Some apps use a more detailed permission screen with lists of “Things this App can view” and “Things this App can do.”
  • You’re responsible for what apps do: X’s automation rules say you’re ultimately responsible for actions taken by apps you connect. If an app’s automated activity breaks the rules, X may filter your posts from search or suspend your account. X also bans apps that claim to get you more followers, automated likes, and bulk or aggressive following and unfollowing.
  • X says it never shares your password with apps, but an app may use, store and share your information under its own policies, so read its terms and privacy policy first.

Shared account in X Pro (Teams): check who has access

X Pro’s Teams feature lets several people use one account without sharing the password. X says the owner is responsible for what admins and contributors post. Our note: a team member you don’t recognize could explain posts you didn’t make.

  • Roles: the owner manages the password, phone number and login verification; admins can also invite and manage the team; contributors can post, repost, DM, like and schedule posts but can’t manage the team.
  • Remove someone: in X Pro, click Accounts > select the account > Manage team > Change role next to the person > Remove from team, and confirm. X says owners and admins can do this.
  • Add someone: in X Pro logged in as the shared account, Accounts > Manage team > Add a team member (their @username) > Authorize. They must accept the invitation. X allows up to 200 team members.
  • Leave a team: Accounts > select the account > Leave team > Leave.
  • X says each team member can turn on login verification on their own account.

X Delegate: check who else can post as you

X Delegate lets other people act on behalf of your account without your password. X says changing your password doesn’t remove delegates, so if posts you didn’t make keep appearing, check this list.

  • See or remove delegates (x.com): log in, click Your account > Security and account access > X Delegate > Members you’ve delegated to, then Change role or Remove from account, and confirm. X says owners and admins can manage delegates; contributors can’t.
  • Roles: the owner manages the password, phone number and login verification. Admins can invite others and view post analytics. Admins and contributors can post, repost, send DMs, like, schedule and delete posts for the account. X says the owner is responsible for what delegates post.
  • Invite someone: X Delegate > Invite a member, enter their name or @username, choose contributor or admin, and click Send invite. They must accept. Can’t invite someone? X says they may have turned off invitations; ask them.
  • Leave an account you were invited to: in Delegate on x.com, select the account > Leave account > Leave.
  • Stop invitations to you: in Delegate on x.com, turn off Allow others to Delegate to you.

A third-party app isn’t working

X says third-party apps aren’t owned or run by X, so it can’t troubleshoot them. Contact the app’s developer instead.

How to know it worked

  • Our check: only apps you trust are connected, only your own devices are logged in, and no new activity appears that you didn’t make.

Still not working? Your next steps

  1. Still seeing activity you didn’t make, or can’t get in? See can’t log in to X.

Official help routes

SocialAppFix can’t see or change your account. For account decisions, recovery and appeals, only the platform’s own tools can help. These links go to the official sites.

Frequently asked questions

How do I log out of X on all other devices?

X says go to Settings and privacy > Apps and sessions > Sessions and click Log out all other sessions.

Why is my X account posting things I didn’t post?

A connected app with write access or another logged-in session can post for you. Revoke unknown apps and log out other sessions in Apps and sessions, then change your password if you ever shared it with an app.

Do X delegates lose access if I change my password?

No. X says delegates keep access after a password change. Remove them in Your account > Security and account access > X Delegate > Members you’ve delegated to.

Can a connected app read my DMs?

Only if you gave it Direct Message permission. X says apps with that access can send, view and delete your DMs.

Sources and how we checked this guide

We base steps on the platforms’ own help pages and the phone makers’ official guides. Menu names change often and can differ by device, app version and region. Where a platform page could not be independently read, we link it so you can check the current wording yourself.

  1. About third-party apps and log in sessions (external site, opens in a new tab)X Help Center · checked 31 October 2026
  2. How to use the Teams feature on X Pro (external site, opens in a new tab)X Help Center · checked 31 October 2026
  3. How to use the Delegate feature (external site, opens in a new tab)X Help Center · checked 31 October 2026
  4. Automation rules (external site, opens in a new tab)X Help Center · checked 31 October 2026

Last reviewed 31 October 2026 by the SocialAppFix editorial team against the sources above. Next scheduled review: 31 January 2027. How we write and review guides.

What changed
  • 31 October 2026: First published.

SocialAppFix is an independent guide and is not affiliated with or endorsed by X Corp.. We never ask for passwords, login codes or payment to fix an account.