Reclaim an X Account Held by a Former Employee

Is this your situation?

Do this first

Which situation is yours?

• Employee still logged in, won't hand over access
• No one at the company has login access at all
• Employee changed the password after leaving
• Employee also controls the 2FA phone
• Account renamed by the ex-employee
• Account still shows employee's personal details
• Company believes the account was suspended or terminated in error

How X handles this

• If no one has login access to the account, they can contact the support team for additional help.
• Unauthorized access or modification of someone's X account is strictly prohibited.
• Users are ultimately responsible for the actions taken with their account, or by applications associated with their account.
• If a user believes their account was terminated in error, they can file an appeal following the steps found in X's Help Center.
• X will make reasonable efforts to notify a user of account suspension or termination by the email address associated with the account.

Which recovery path is yours?

1. Does anyone at the organization still have login access? If no one has login access to the account, they can contact the support team.
2. Do you believe the account was suspended or terminated in error? A user who believes their account was terminated in error can file an appeal following the steps found in X's Help Center.
3. Is the former employee accessing or modifying the account without authorization? Unauthorized access or modification of someone's X account is strictly prohibited.
4. Who is responsible for actions taken on the account while the employee held it? Users are ultimately responsible for the actions taken with their account, or by applications associated with their account.
5. Has the organization been notified about a suspension or termination of the account? X will make reasonable efforts to notify a user of account suspension or termination by the email address associated with the account, or the next time the user attempts to access the account.

What not to do

• Trying to log in with guessed passwords You keep attempting logins hoping one password works.Why it happens: X blocks repeated sign-in attempts to prevent hackers from having unlimited attempts at guessing a password.
• Assuming the employee's control settles ownership Holding the login does not establish who owns the account.Why it happens: Unauthorized access or modification of someone's X account is strictly prohibited.
• Assuming the company alone bears no responsibility for the account's activity Actions taken on the account while held are still tied to the organization.Why it happens: X users are ultimately responsible for the actions taken with their account, or by applications associated with their account.

What to have ready

• Proof of organizational ownership Documents showing the account belongs to the company, not the individual.
• Record of who created the account Any record naming the account's original registrant.
• Associated company email or domain You want to confirm the account's email matches a company address.
• Internal offboarding records Check whether access removal was documented when the employee departed.
• Any remaining admin or delegate access Check whether anyone else at the company retained a role on the account.
• Evidence of unauthorized changes Note any changes made to the account after the employee's departure.
• Legal or HR contact Have an internal contact ready who can confirm employment dates.

Stop this happening again

Quick reference

Keeping track of who has access