With Twitter in disarray and its security doubtful, here's how to protect your account

Experts say that job cuts may open the door to exploitation of the platform's vulnerabilities and the compromising of user accounts

Elon Musk, the new owner of Twitter, has been continuing his teardown as users seek alternative platforms. AFP

Twitter is in chaos. Elon Musk, its new owner, has cut its staff and this week gave those remaining an ultimatum — work gruelling hours and be “extremely hardcore " or leave. Hundreds chose the latter and headed for the door.

There are signs that the departures are stressing the system. Some users noticed problems receiving texts to sign in with two-step verification.

Some users are receiving a renewed barrage of spam in direct messages and on their feed, while others complain of receiving new replies to long-deleted tweets and seeing saved tweet drafts disappear.

Still, the site is chugging along.

Twitter will not simply shut down overnight, but security analysts said that the drastic job cuts may open the door to exploitation of the platform's vulnerabilities and compromising of user accounts.

While there is not much to be done about Mr Musk's teardown of one of the world's key online information businesses, there are steps to protect accounts if Twitter users are not ready to fly the coop in search for an alternative.

Enable multi-step authentication

If you only use your login and password to sign in to Twitter, it's important, especially now, to add an extra step to the process so it becomes more difficult for hackers to access your account.

Twitter has three methods to choose from: text message, an authentication app or a security key. Since there have been some glitches with users not receiving text messages to authenticate their accounts, and because it is generally considered a safer option, using the authentication app is probably your best bet.

To do this, you will need to download one of a number of available applications to your device. They are free in the Apple or Android app stores and some examples include Google or Microsoft Authenticator, Authy, Duo Mobile and 1Password.

Once you have the app, open the desktop version of Twitter and click on the icon showing ellipses in a circle. There, you'll find “Settings and privacy” then “Security and account access” and finally, “Security”. Here, you can select “Authentication app” and follow the instructions to set it up. Twitter will ask you to share your email address to do this, if you have not already.

Once you are all set, you can use the auto-generated numeric codes from your authentication app to add an extra layer of security when logging in to Twitter.

Shut down third-party access

Jane Manchun Wong, an independent software and security researcher in Hong Kong who follows Twitter closely, recommends revoking permissions to third-party sites and apps through your Twitter account.

That is because if there is a potential security problem with Twitter's API (or application programming interface, which lets third parties access Twitter data to create apps that work with Twitter, for instance) with fewer people working at the company, patching it up will inevitably take longer.

To turn off this feature, start in the “Security and account access” tool and go to “Apps and sessions.” Here, you should find all the third-party apps that have are connected to your Twitter account — including some you may have linked years ago that no longer exist — and you can revoke access to each one.

Download your archive

For the nostalgic, for research or for the digital hoarders among us, the idea of losing a decade or more of our tweet history is a catastrophe. Fear not, though. It might take some time, but you can download your Twitter “archive” if you'd like to ensure it's preserved — just in case.

As with other more complex features, this tool is only available on the desktop version of Twitter, in the “Your account” section of settings. You will have to enter your password again and go through two-factor authentication if you have that set up.

When your archive is ready to download, you will get a notification on Twitter. Again, you will have to download it on the desktop version of the site. While normally this process takes about 24 hours, it may take longer now. Some users have also reported having to try more than once.

Preserve your followers list

While there is no perfect replacement for Twitter — and of course Twitter is still here — many users, especially those in journalism, tech and academia, are signing up for Mastodon, a previously little-known platform that was launched in 2016.

Mastodon is a decentralised social network. That means it is not owned by a single company or billionaire. Rather, it is made up of a network of servers, each run independently but able to connect so people on different servers can communicate.

Signing on can be complicated — you will need to pick a “server” to join, but regardless of which one you choose, you can still communicate with people on other servers, in the way you can email people from your Gmail account even if they are on Outlook or another email server.

Once you are in, you can go to fedifinder.glitch.me and find your Twitter following or any Twitter lists you might have to see if they also have Mastodon accounts. Many Twitter users are also listing other social networks and content information in their bios or even Twitter display names so people can get in touch with them — just in case.