Can't Log In to Your Twitter Account? 2FA Code, Phone Check and Token Fixes

Every account you bought is one line in the Delivered accounts box of your order page (Dashboard → Orders → your order). Nothing is emailed. Copy credentials copies the lines; Download saves them as a text file, which is easier to read when lines are long.

This page starts from the screen you are looking at. Find it below and follow that part only. If you want to know what every field means first, our post on 2FA, auth_token and ct0 explains each one.

Before anything: find three things in your line

Your line may carry six fields or ten. To sign in you need at most three of them.

• Username and password: always the first two fields.
• 2FA key: 16 or 32 capital letters and digits 2 to 7, like KQ7MZP3XW2LTNB5R. Not every batch has one.
• auth_token: exactly 40 characters made of digits and the letters a to f. Most batches have one.

blueheron2011:Tm8vQx2Lp:KQ7MZP3XW2LTNB5R:bh2011@outlook.com:mailpw55:9c1e...(160):4be0...(40)
username : password : 2FA key : email : email password : ct0 : auth_token

oldfox_09----Wq3nZr8Ty----oldfox09@hotmail.com|hm4471|M.C519_BAY.0.U...|9e5f94bc-...----7d21...(40)
username ---- password ---- email | email password | mail token | client ID ---- auth_token

The separators change between batches: colons, ----, or | inside the email part. Count characters, not positions. The 160-character field is ct0 and you can ignore it.

Screen 1: X asks for a 6-digit code

This is the 2FA check, and it is the question we get most. The code is not in your line. You make it from the 2FA key.

1. Open the checkkit 2FA code generator.
2. Paste the 2FA key and generate the code.
3. Type the 6 digits into X within 30 seconds. If X says the code is wrong, make a new one; codes expire fast.

Still wrong after two fresh codes? Your device clock is probably off. Set date and time to update automatically and try again.

No 2FA key in your line? Then skip this screen entirely and use the auth_token (Screen 3).

Screen 2: X wants a code sent to a phone number

That number belongs to the account's original setup and you cannot receive its SMS. Do not keep pressing "resend" or retrying the password; repeated attempts make X stricter.

• If your line has an auth_token, sign in with it instead (Screen 3). It skips this check.
• If it does not, stop and open a ticket from the order page with a screenshot of this screen.

If X offers to send the code to the email instead, take that option: open the mailbox at outlook.live.com with the email and email password from your line. The long M.C5... string and the ID after it are for mail tools, not for you to type anywhere.

Screen 3: signing in with the auth_token

The auth_token is a saved X session. With it you skip the password, the 2FA code and the phone check.

1. Add X Token Login to Chrome or Edge.
2. Open x.com, click the extension and paste the 40-character auth_token.
3. Confirm, then refresh x.com.

"The token is wrong"

Three causes cover almost every report we have seen:

• The wrong field was pasted. The ct0 is four times longer; the auth_token is exactly 40 characters.
• Extra characters came along, often a dash from a ---- line or a space. Paste into a plain text editor first and copy just the 40 characters.
• The session was signed out somewhere, which ends the token. Sign in with the password and 2FA key instead, or report it if the line has no other way in.

Once you are in

Keep it quiet for the first days. One browser, one connection, no changes to the password, email or 2FA. Changing all three on day one is the most common reason an account gets suspended afterwards, and suspension after use is outside the replacement terms.

When to report it

If the password is refused on the first try, the account says it is suspended, or none of the ways above get you in, open a ticket from the order page within the guarantee period shown on the product. Say which line and attach a screenshot. Our old Twitter accounts and accounts with followers are replaced within 24 hours of delivery when they do not work as delivered.