Your account
Usernames, passwords, your email address, staying signed in, and the accounts you start out following.
Your username Copy a link to this section
Your username is the @name people use to find and mention you, and it is part of your profile's web address.
- Between 3 and 30 characters
- Lowercase letters, numbers and underscores only
- It cannot start or end with an underscore, and it cannot contain two in a row
That last rule is not fussiness. Names that differ only by punctuation — easy_bie against easy__bie — are how impersonation works, so they are not allowed to exist side by side.
Your display name is separate and has none of these rules. Change it whenever you like in Settings → Profile.
Your password Copy a link to this section
Passwords must be at least 10 characters. Length does more for you than punctuation does, so a short phrase you can remember beats a short word with symbols in it.
After five failed sign-in attempts, that address is locked out for fifteen minutes. This is a deliberate cost imposed on somebody guessing, and it applies to you too if you are the one guessing.
Your email address Copy a link to this section
You can change it in Settings → Account. It takes your password, because whoever receives mail at your address can reset that password — changing it is closer to handing somebody the account than to editing your bio.
Nothing changes when you press the button. We send a link to the new address, and the account only moves once you open it. Until then the old address still works for everything, so mistyping the new one costs you nothing.
Your current address gets a message too, naming the new one, with a link that stops the change and signs out every device. That message is the point of the whole arrangement: if somebody else ever starts this, it is what tells you while you can still do something about it. If one arrives and it was not you, open that link and then change your password — whoever asked knew the old one.
Confirming signs you out everywhere, including on the device that asked.
Staying signed in Copy a link to this section
A session lasts 30 days. You can change your password from Settings → Account at any time.
The accounts you start out following Copy a link to this section
A brand new account follows a small handful of accounts so that Following is not an empty page on your first day.
These are ordinary follows. They appear in your following list, you are told they were made, and you can undo any of them from that person's profile in one press. A follow you cannot see and did not agree to is somebody else's follower count inflated on your behalf, which is why you are told.