Opsec for your accounts

Your X account is a vault door standing in front of years of reputation, so treat the lock accordingly. Use a unique password you don't reuse anywhere else, and set two-factor authentication through an authenticator app or a hardware key — not SMS. SIM-swap attacks exist specifically to defeat text-message codes by hijacking your phone number, and they work.

Avoid tying wallet addresses directly to posts about your real identity, and be careful logging into your account on shared or public devices — clear sessions when you're done.

Watch OAuth prompts closely. Some random "analytics" or "growth" app asking for full account permissions isn't offering you a service, it's asking for the keys to post, DM, and edit your profile as you. Deny it. A popular-looking app is still just an app; popularity doesn't vouch for what it does with the access once it has it.