X Account Locked? How to Unlock It or Lift the Limit

You open X and, instead of your timeline, X tells you your account has been locked, asks for your phone number, or says some features are limited. You can read posts but cannot post, like or reply.

The short answer: most X locks are not suspensions. They are a security check you pass with your phone, email or a reCAPTCHA, a timed limit you wait out, or a one-hour lock after too many wrong passwords. Identify which one you have before you tap anything.

This guide explains each lock, what to do for each, when to appeal, and the scams aimed at people who have just been locked out.

Last checked: 29 September 2026.

#What Should You Do If X Says Your Account Is Locked?

Screenshot the message and match it to one of four situations. After too many failed logins, wait about an hour; X says that lock clears on its own. If X asks you to confirm you are the owner, complete the phone, email or reCAPTCHA challenge in the X app or on x.com only. If features are limited, choose "Verify" where offered or "Continue to X" to start the countdown, and remove any post X says broke its rules. If you believe the lock is a mistake, log in and use X's appeal form. Nobody outside X, including AwareXone, can lift a lock for you.

#Locked, Limited or Read-Only: Which One Do You Have?

X has several states that people all call "locked". Its help page on locked and limited accounts and its list of enforcement options describe them. The exact wording on your screen can vary by app version, language and region, so match on the key words.

#Locked Out After Too Many Login Attempts

X's page on the temporary account lock says that after a limited number of failed attempts you are locked out, even with the correct password, and that the lock lasts about an hour before clearing on its own. It stops attackers guessing your password.

1. Stop trying to log in while the lock is active.
2. Disable third-party apps that use your X login, such as X Pro, Hootsuite or widgets. X says an app holding an old password can keep triggering locks.
3. Wait an hour, then sign in at x.com/login. If you forgot the password, request one reset and check your spam folder.
4. Once in, re-enable only the apps you trust and update the saved password in each.

If you did not cause the failed attempts, treat it as a warning sign. X says that when an account appears hacked or phished, it may reset the password and email the real owner. See the section on hacks below.

#Locked for Security Purposes: How to Pass the Challenge

A security lock means X wants proof that a real owner is behind the account. X's help page says this happens when it detects suspicious automated behaviour that breaks the X Rules, and that you unlock it by verifying through phone, email or a reCAPTCHA challenge, depending on the message you see.

While the account waits for that challenge, X's enforcement page says it is removed from follower counts, Reposts and likes. That is why your follower number can suddenly drop.

• Open the X app or type x.com yourself. Do not follow a link from a message.
• Use a number that receives SMS today. In Malaysia, check that a prepaid line has not expired.
• If a code is slow, X's two-factor help page says SMS can be delayed, so wait at least two minutes before retrying.
• Never forward the code or let anyone else solve the challenge for you.

If you no longer have the phone or email on the account, X says to contact its support team, and admits that sometimes the only option is to create a new account. Our guide to recovering an account without the old email, phone or 2FA covers how to prepare for that request.

#Features Temporarily Limited: Verify or Wait Out the Countdown

A limit is narrower than a lock. You can log in, but X says only your followers may see your activity, your posts may be filtered out of search and notifications, or you may be able to post from a desktop browser but not the app. When the limit follows aggressive following or engagement, X offers two options:

1. Select "Verify" and confirm your phone number or email address to restore features straight away.
2. Select "Continue to X" to use the account in a limited state and start the countdown for the time shown.

#Read-Only Mode After a Rule Violation

Read-only mode is X's response to a possible rule break. Its enforcement page says X may temporarily stop an account posting, reposting or liking, while the owner can still read timelines and send Direct Messages to followers. X's help page adds that only followers can see your past posts.

1. Log in and find the message "We've temporarily limited some of your account features."
2. Select "Start" and complete what X asks: verifying your email, adding a phone number, or deleting posts that break the rules.
3. Once X has what it needs, the countdown on the limited state begins.

X's page on account notices says the account stays locked until a post found in violation is removed. If you believe X got it wrong, appeal the removal instead. X also warns that repeat violations may lead to permanent suspension.

#What Visitors See: The Temporarily Restricted Warning

Visitors may see a warning before your profile loads, often searched as "Caution: This account is temporarily restricted". X's help page describes it without quoting it: visitors are told the account showed unusual activity, or may have broken the X Rules, and asked whether they still want to view it. X does not say how quickly it disappears after the lock ends, so tell important contacts from another channel what is happening.

#Stuck on "Something Went Wrong" When You Try to Verify

Some people report a verification screen that keeps returning "Something went wrong". At the time of writing, X's help centre does not document this error, so there is no official fix. These safe steps come from X's login help and lock pages:

• Update the X app, or switch to x.com in a desktop browser. For logins that fail after a password reset, X suggests a different browser or computer.
• Make sure the browser accepts cookies and clear its cache, which X's login help also recommends.
• Close X Pro and other third-party apps, then wait an hour so you are not also in a login lock.
• If it still fails, use X's regain access form and describe the exact screen you see.

#What If the Lock Is Really a Hack?

Sometimes a lock is X protecting you. X's page on compromised accounts lists the signs: posts or Direct Messages you did not send, follows or blocks you did not make, a notice that your account information changed, or a password that suddenly stops working. X's suspension page adds that it may suspend a hacked account until it can be secured and returned to the owner.

1. Secure the email account linked to X first: new password, and remove forwarding rules you did not set.
2. Change your X password, or use "Forgot Password" from the login screen.
3. Check your previous inbox. X says it emails the old address whenever the account's email changes.
4. If you still cannot get in, use X's hacked or compromised support form from the linked email address, with your username and the date you last had access.
5. Once back in, turn on two-factor authentication and store a backup code offline.

If the attacker already changed the email or turned on their own 2FA, our guide to an X account hacked with the email changed goes through that situation step by step.

#Age Checks and Birthday Locks

Some locks are about age. The X help pages we read do not describe an age lock or its appeal steps, so we will not guess at them. X's notices page does say it restricts adult content for viewers under 18 or with no birth date on their profile.

In Malaysia, MCMC's Under-16 page says that from 1 June 2026 social media platforms are required by law to verify user age, and tells users to follow their platform's guidance. If X asks you to confirm your age, do it only in the X app or on x.com, and never send your MyKad to someone offering to help.

#Evidence Checklist Before You Contact X Support

• Screenshots of the lock or limit message, with the date and any reason shown.
• Your username, plus the email and phone number on the account, and access to that inbox.
• The date you last had normal access, which X asks for on its hacked account form.
• The third-party apps connected to the account, and which ones you disabled.
• For a suspected hack: login alerts, email change notices and posts you did not send.
• Three or four calm, factual sentences explaining what happened.

#Mistakes That Keep an X Account Locked

• Requesting reset after reset during a login lock. X's login help says not to.
• Leaving X Pro or a scheduling tool running with an old password.
• Choosing "Continue to X" in a hurry, then losing the option to verify.
• Neither deleting nor appealing a flagged post, so the account stays locked.
• Appealing while logged out. X says to log in first, then open the appeal form in a new browser tab.
• Giving up when the appeal page says "This browser no longer supports this form." Try another browser.

If the lock has turned into an "Account suspended" label, the route changes. Our guide to appealing an X suspension covers that process, and X's own appeal form for locked or suspended accounts only works once you are logged in.

#If You Paid Someone or Shared a Code in Malaysia

Deal with the money first. The NSRC's FAQ on the NFCC website says to call your bank's 24-hour hotline or the NSRC on 997 as soon as you notice an unauthorised transaction, then make a police report at the nearest station within 24 hours. It also says NSRC, PDRM, MCMC, BNM and banks will never ask for your password, PIN, TAC or OTP.

A fake X login page or phishing link can also be reported to CyberSecurity Malaysia's Cyber999 incident response centre, by online form, email, phone or its app. If your phone suddenly shows "No service" while X codes stop arriving, call your carrier from another phone and ask whether your SIM was replaced.

#When Expert Recovery Help Makes Sense

Most X locks can be handled alone with the steps above, and only X can lift one. A second opinion helps when a hack and a lock are tangled together, when the phone and email on the account are gone, or when the account carries your business. SocialSafe by AwareXone, our recovery service, reviews the case first and tells you honestly whether an official route is still open; sometimes the answer is that you already have what you need. You can read how we handle X account recovery, and our Trust Center sets out what we will never ask for, starting with your password and codes.

#Frequently Asked Questions