Hmmmmmm. If I get a spurious Twitter 2fa code, that means they already had my password, right?
When I tried in an anonymous window just now, putting in a wrong password doesn't get me to the 2fa.
3
6
Could also be someone trying to add your phone number to another Twitter account and it's a verification message. I can't remember if their 2fa messages and phone number verification message text are the same.
1
ok I was curious so I just tried the SMS verification and got "Your Twitter confirmation code is XXXXXX"
I tried a 2fa challenge and got "XXXXXX is your Twitter login code. [...]"
So yeah I can't think of another way to trigger that unless someone got past the password prompt.
Jan 24, 2020 · 12:19 AM UTC
1