Hmmmmmm. If I get a spurious Twitter 2fa code, that means they already had my password, right? When I tried in an anonymous window just now, putting in a wrong password doesn't get me to the 2fa.
3
6
Replying to @tabatkins
Could also be someone trying to add your phone number to another Twitter account and it's a verification message. I can't remember if their 2fa messages and phone number verification message text are the same.

Jan 24, 2020 · 12:06 AM UTC

1
Replying to @aaronpk
I got "XXXXXX is your Twitter login code. [...]", which sounds pretty reasonable. But maybe their phone verification message is just wrong. ^_^
1
ok I was curious so I just tried the SMS verification and got "Your Twitter confirmation code is XXXXXX" I tried a 2fa challenge and got "XXXXXX is your Twitter login code. [...]" So yeah I can't think of another way to trigger that unless someone got past the password prompt.
1
more replies