Were You Inundated With X Password Reset Requests Today? You're Not Alone

Did you wake up this morning to multiple password reset requests from X? Dozens of users took to the social network this morning to report receiving at least 10 emails around 9:30 a.m. ET.

The messages, which appeared in the inboxes of at least one PCMag staffer, looked legit; they came from [email protected] and included the six-digit confirmation code required to complete a password reset. "If you didn't make this request, ignore this email," it said.

Easier said than done. The messages sparked a wave of concerned posts on X from people worried they had been hacked or targeted by a phishing campaign.

X Product Engineer Mridul Singhai said the company is "actively investigating the issue and, so far, [has] found no evidence of any breaches. We apologize for the multiple emails and appreciate your patience as we work to resolve this."

Singhai attributes the concerning emails to X Money , Musk's payment platform for X Premium subscribers that became publicly available in July. "Attackers appear to believe that, now that @XMoney is widely available, they can gain unauthorized access to accounts."

How to Secure Your X Account

If you've received suspicious emails, don't click on any links. Go directly to the X mobile or web app to check your account status. If you don't have secondary security set up on your account, do that ASAP, whether it's two-factor authentication (2FA) or a passkey.

Also consider enabling Password reset protect via Settings > Security and account access > Security > Password reset protect."If you check this box, you will be prompted to enter either your email address or phone number, or your email address, then phone number if both are associated with your account, to send a reset password link or confirmation code if you ever forget it," X says.

The same Security page is also where you'd go to set up 2FA or a passkey. For 2FA, you can use an authenticator app or a security key . To receive codes via text messages, you'll need to be a Premium subscriber , but we don't recommend using SMS for 2FA codes anyway.

For more on passkeys, check out our explainer .

PCMag and Yahoo may earn commission from links in this article.