X account locked: how to unlock it without making it worse
A locked X account is one X wants the owner to verify, by phone number, email code or captcha, before it works again. Complete that check from the browser profile and proxy the account always uses, change nothing else that day, and slow it down afterwards. If the notice says suspended rather than locked, you need an appeal instead.
The notice says the account has been locked and there is a Start button. X's own help page covers the mechanics, and it is right about them. What it leaves out is why locks keep landing on people who run several accounts, and how to clear one without handing X a second reason to look at you.
This is the operator's version, for X (formerly Twitter, and still Twitter to most search engines). If the notice says suspended rather than locked, you want how to appeal an X suspension instead. Telling the two apart comes first, because only one of them is self-service.
What a lock is, and what it is not
X's definition, from the locked and limited accounts help page (checked 19 September 2026): "If your X account is locked or limited to certain account features, it may be compromised or in violation of the X Rules or Terms of Service. When this happens, the first step is to verify you are the rightful account owner." That is the whole model. A lock is an ownership check: X has seen something it does not like and wants the owner to show up before anything else happens.
Two things happen while the lock stands. Visitors are warned: the same page says that "people who visit your profile may see a message letting them know the account has displayed unusual activity and asking them to confirm they still want to view it." And the account stops counting. The enforcement options page states that "when an account has been locked pending completion of a challenge (such as being required to provide a phone number), it is removed from follower counts, Reposts, and Likes." That is why a locked account's follower count appears to collapse: nothing has left, it is not being counted until the check is complete.
The same page describes two neighbouring states that get reported as locks. Read-only mode, where X may "temporarily limit an account's ability to post, Repost, or Like" while you can still read and message your followers: nothing to verify there, and no published duration, so you wait. And suspension, which shows an Account suspended notice and is cleared by an appeal, not a code. The interstitial visitors see on a locked profile is also regularly reported as a shadowban, which it is not.
| What you see | State | Route out |
|---|---|---|
| A notice that the account is locked, with a Start button | Locked, pending an ownership check | Phone or email verification, from the account’s own browser profile and proxy |
| A captcha, then Continue to X | Locked for what X calls automated behaviour | Pass the captcha, select Continue to X, then slow the account down for days |
| You are unable to follow more people at this time | The daily follow limit, following too quickly, the ratio wall, or a lock or limit from aggressive following | If the rest of the account works, wait. If it does not, treat it as a lock |
| Posting, reposting and liking disabled, reading still works | Limited: read-only mode | Nothing to verify. Wait; DMs reach followers only until it lifts |
| Account suspended | Suspended, not locked | An appeal, or the phone and email prompts if login shows them. See the appeal guide |
| Rate limit exceeded | Not a lock. A bucket of one of the published limits, or reduced limits under heavy load | Wait. Nothing to verify. See X rate limits |
The three routes out, step by step
Which of the three routes your notice shows depends on the lock. The steps below use the help page's own button names, which is also how you tell the real flow from a page imitating it.
By phone
- Log in to the locked account and select Start on the notice.
- Enter a phone number. The page is explicit about what that means: "Please note that we will associate this phone number with your account."
- Enter the code X sends to that number and select Submit.
By email
- Select Start, then Send email.
- Open the inbox attached to the account and copy the code from the message.
- Enter the code and select Verify.
By captcha
This is the route that follows automated behaviour, and the page says so: "If your account appears to have exhibited automated behavior that violates the X Rules, we may lock it and request that you pass a captcha challenge to confirm you are not a robot." Pass it, then "select Continue to X to unlock your account." If you run automation this is the lock you will meet most, and it is about pace, not ownership. Clearing it and changing nothing is how you meet it again.
Why it happened, from the operator's side
The help page gives two families of cause, compromised or in violation of the rules, and does not say which applied to you. A lock described as being for rule violations is the second family; the route out is the same, the difference is what you do afterwards. X publishes no thresholds for either, so what follows is what is observable from running many accounts, not a detection rule.
- Automated behaviour. The captcha lock names it outright. In practice that means acting at a pace or with a regularity a person would not, and it tends to land after a pattern repeats, not on the first burst.
- Aggressive following. X's follow limit page lists an account being locked or limited "including due to aggressive follow behavior" among the reasons for the message "You are unable to follow more people at this time". Follow and unfollow churn is the most common way a careful account earns a lock.
- A new network or device. A login from an address and a browser the account has never used reads as a possible takeover. Operators trigger it by moving an account between machines or proxies without moving its browser profile with it.
- A burst from a young account. A week old account doing what a two year old account does is the pattern the warming ramp in why X accounts get suspended exists to avoid.
- A proxy whose exit moved. A rotating or unstable proxy that changes country mid-session hands X a session that started in one place and continued in another, which is what a hijacked session looks like. Choosing proxies for X accounts covers why sticky sessions are the only kind that suit account work.
The rule that matters most: same proxy, same profile
A lock is X looking at the account closely. The worst move is to answer the check from somewhere the account has never been: your phone on mobile data, a fresh browser with no cookies, or a different proxy because the usual one felt slow. Each is a new inconsistency at the exact moment inconsistency is what is being measured.
Before you press Start
Open the account in the browser profile it always uses, through the proxy it always uses, and have the phone or the inbox to hand. If the account normally runs inside an automation tool, use that tool's browser window, not a separate one.
The second rule is to change as little as possible. X's limits page lists changes to account email among its rate-limited actions, at four per hour. A lock cleared by phone verification and followed within the hour by a new email, password and display name looks like an account that changed hands, which is what the lock was checking for. If you genuinely believe the account was compromised, change the password only, and do the rest days later.
When flottra's detector sees X redirect a session to /account/access, it classifies the account as locked, stops every task on it and does nothing further; locked is a terminal state until a person clears it. Because the desktop app runs a real Chrome window per account on your own computer, through that account's own proxy, the window the person clears it in is the one the account has always used. It does not clear locks for you, and it should not.
Phone numbers: read the small print
The phone route has a lasting consequence: the number is attached to the account afterwards, in the page's own words. X's phone number FAQ adds two things worth knowing before you type one in.
- A number already on another account may be refused. The FAQ does not publish how many accounts one number can hold, so do not plan around a figure. If you run several accounts, the practical position is a number per account, owned by you.
- Numbers can be reclaimed. The FAQ describes a notice that "can be triggered when an account is both inactive for 45 or more days and the number attached to the account is added to a new account (and the account owner is able to verify their ownership of the number)." An idle account can lose its number, and an account with no working number and no working inbox has no way through its next lock.
Use a number you own, will still own in a year, and that receives messages where you are.
When it locks again
One lock is an event. Two in a week is a message: whatever the account was doing before the first one, it is still doing. X does not publish what escalates a lock into a suspension, but an account that repeats the pattern straight after being asked to verify is inviting the next question, and the next one is not self-service.
Slow it down for days, not hours. No lock duration is published on any help page, so there is no number to wait out; the thing to change is the behaviour. Drop the account back to an early phase of the warming ramp in the suspensions guide: flottra's default observer phase is one to three likes a day, at most one follow, and no posts for three days. Cut the follows first, since following is the one specific activity the help pages name as a lock reason. When it does resume, spread the activity unevenly across daytime hours on the account's own clock, not the machine's.
The short version
- Read the notice. A Start button means verification. Read-only with nothing to verify means wait. Account suspended means an appeal, not this page.
- Open the account from its own browser profile and its own proxy. No second device.
- Complete the route offered, phone, email or captcha, using the button names above. Use a number you own and will keep.
- Change nothing else that day. Password only if you believe the account was taken.
- Run the account at a fraction of its previous pace for several days, follows first. If it locks again, the pace was the problem; the fix is in the suspensions guide, not on the lock screen.
Do those five and a lock stays what it is designed to be: a check, answered and done. Skip the second and you have answered it with a fresh inconsistency.
Questions
- How do I remove the lock on my Twitter account?
- Log in and follow the prompt X shows. There are three routes: enter a phone number and the code it sends, request an email code and enter it, or pass a captcha and select Continue to X. Take whichever route the lock screen offers. Do it from the network and the browser the account normally uses, and do not change the password, email and phone in the same session unless you have real reason to believe the account was compromised.
- How long is a Twitter account locked for?
- X does not publish a duration, and the locked accounts help page gives none. A lock that asks for verification is described as pending completion of a challenge, so it lasts until you complete it, and the account stays out of follower counts until then. A read-only limit is different: X describes it as temporary and offers nothing to complete, so that one you wait out. Anyone quoting a fixed number of hours or days is guessing.
- How does a Twitter account get locked?
- X’s help page gives two families of reason: the account may be compromised, or it may be in violation of the X Rules or Terms of Service. The second includes what X calls automated behaviour, and its follow limit page names aggressive following as a reason an account can be locked or limited. Common operator-side triggers are a login from a new network or device, a burst of activity from a young account, and a proxy whose exit moved mid-session. X does not publish the thresholds.
- How to unlock a locked Twitter account?
- Open the account in the browser profile it normally uses, through the proxy or connection it normally uses, and select Start on the lock notice. For the phone route, enter a number you control and will keep, then the code X sends, then Submit. For the email route, select Send email, enter the code and select Verify. For a captcha, pass it and select Continue to X. Then leave the account alone for the rest of the day and run it slowly for the days after.
- Can I unlock my X account without a phone number?
- Sometimes. The help page describes three verification routes, and two of them, the email code and the captcha, need no phone. Which route your notice shows depends on the lock, and a lock that asks specifically for a phone number does not offer a way round it. If you do add a number, X states that it will associate that number with the account, so use one you own and expect to keep. The help page does not say how many accounts one number can verify.
- Why does my locked account show as having no followers?
- Because X stops counting a locked account while the check is pending. The enforcement options page states that an account locked pending completion of a challenge, such as being asked for a phone number, is removed from follower counts, Reposts and Likes. It does not detail every place the numbers change, but the mechanism is the same: the followers have not left, the account is not being counted while the lock stands. Completing the verification is what puts it back.
- Is a locked X account the same as a suspended one?
- No. A lock asks you to prove you own the account, by phone, email or captcha, and you clear it yourself. A suspension shows an Account suspended notice and is cleared, if at all, by an appeal that X reviews. There is a middle case: the suspended accounts help page says that if logging in shows prompts for a phone number or email confirmation, following them is how you get the account unsuspended. Read the notice carefully before deciding which page applies to you.