Why Nobody Can Give You an X Warm-Up Schedule (And What to Check Instead)

Search for a warm-up schedule and you will find one. Day one, like three posts. Day three, follow five accounts. Day five, start posting. Under a hundred and fifty actions a day.

None of those numbers came from X. This page used to carry a set of them, which is why it has been rewritten rather than edited.

The short version, so you can stop looking

X does not publish thresholds for what a new human account may do before it draws a review. Its help pages are not even readable by an automated request, and its public developer documentation covers something different: rate limits on API requests, counted per app or per access token. Those govern software calling the platform. They are not a budget for follows and posts made by a person in the app, and anyone presenting them as one has changed the subject.

So when a schedule tells you eleven follows a day is safe and sixteen is risky, the honest description of where that came from is that somebody chose it. It might be good instinct. It is not a measurement, and it cannot be checked, which means it also cannot be wrong in any way that would ever get corrected.

What follows is only the part that can be checked.

The limit messages are not one thing

Most people arrive here after seeing a message rather than after reading a guide, and the messages are worth separating because they have different meanings and different endings.

• A message about a daily limit for a specific action. This is a cap being enforced, not a judgement being made about you. It names the action it applies to, it resets, and doing something else in the meantime is fine.
• A follow limit that stops you following anyone at all. This one is usually structural rather than behavioural. Once an account follows a large number of people, further following becomes tied to how many follow back, so an account can sit against a wall permanently rather than for a day. Waiting does not move it. Unfollowing does.
• A challenge or a verification step. Nothing has been taken away. You are being asked to confirm something. The way people turn this into a real problem is by failing it repeatedly, and the usual causes of failing it are mundane: changing network partway through, or a content blocker that stops the challenge loading at all.
• A restriction notice in your account settings. This is the only one of the four that is a decision about the account, and it is also the only one that names itself. If your settings do not show one, you do not have one.

The practical value of separating them is that three of the four need patience and one needs an action. Treating all four as "I got flagged, I should go quiet for a week" wastes a week on the one that quiet does not fix.

What is genuinely checkable, on your own screen

Three things, none of which need a number attached to be useful.

Whether your contact details are confirmed. An account with an unconfirmed email or phone number stops sooner than one without. This is not a guess about scoring. It is the observation that the platform interrupts you to ask, and an account that has already answered cannot be interrupted for that reason.

Whether the place you sign in from keeps changing. A sign-in from a country the account has not used before tends to trigger a check. That matters most in the first days of ownership, and it matters for a reason people usually discover too late, which is the next section.

Whether the account has produced anything of its own. An account whose entire history is replies and reposts, with nothing original in it, is an unusual shape. This is a comment on how it looks, not a claim about a threshold, and it is offered as exactly that.

Notice what is missing from that list: any count. The reason there is no count is that the count is the part nobody outside X can supply.

Most bought X accounts never have a first login

This is the largest gap in the advice that circulates, including in the version of this page it replaces.

Warm-up guidance assumes you receive a username and a password, sign in on your phone, and then behave carefully. Across the X accounts currently listed here, that is the minority case. Slightly more than half of the live listings hand over a session token or a cookie set rather than a working password login. The buyer restores a session in a browser profile. There is no sign-in event, no new-device prompt, and no password entry, because nothing was authenticated.

That changes what you should worry about, and it changes it in an unhelpful direction. A restored session skips the sign-in check, which sounds like an advantage until the session expires or something invalidates it. At that point you need the password and whatever guards it, and the moment you use them you produce exactly the unfamiliar sign-in that the careful approach was designed to avoid, except now you are doing it under time pressure on an account you already have work invested in.

So the first job on a token-delivered account is not pacing. It is finding out whether you can actually authenticate it from scratch, before you need to. If you cannot, you do not own the account. You are renting a session from whoever does.

The clock you are actually on

Here is a number that is real, because it comes from this site's own records rather than from X.

Of the live X listings here, close to a quarter carry a warranty window shorter than one hour, and the median across the shelf is twelve hours, measured from delivery rather than from payment. That is the entire period in which a problem is somebody else's.

Put that next to any warm-up schedule and the schedules stop making sense on their own terms. A plan whose first instruction is to do almost nothing for two days spends both of those days outside the window in which you could have raised a fault. The order that survives contact with the actual deadlines is the reverse: verify everything you can in the first hour, then go slow.

What the shelf says people are actually selling

Worth knowing before you shop, because listing vocabulary and article vocabulary have drifted apart.

Ten listings out of more than nine hundred describe an account as warmed or nurtured. Roughly one per cent. The activity this article is named after is barely a product category. What sellers do describe is the registration year, on about six listings in ten, and two-factor and mail access on similar proportions.

Two of those price strangely, and both are useful. Two-factor is mentioned on nearly two thirds of listings and costs essentially nothing extra, which is what you expect on a platform that does not require it: it secures a login nobody was struggling to reach. And the listings that say only "aged" or "old", with no year in them, cost more than the ones that state an actual year. That is the wrong way round for a buyer. A year is checkable and an adjective is whatever the seller decided it means, so on this shelf the vaguer claim is the more expensive one. Prefer the number, and enjoy paying less for it.

Accounts described as fresh sit at under a third of the shelf median. The market has already priced the thing a warm-up schedule promises to fix, and it has priced it at almost nothing.

About the environment advice

Keeping a consistent connection is reasonable, and it is roughly the only environment advice here that survives scrutiny, so it is worth saying exactly what it is worth. A stable connection removes one avoidable reason for a check. It does not make an account safe, and it cannot, because the thing it protects against is only one input among many that nobody outside the platform can see.

If you want that stability, this site does list proxies, and one honest caveat applies before you click through. The proxy category here is small, around eighty listings from a dozen suppliers, and a little over a third of those listings are consumer VPN subscriptions rather than proxies at all. Twenty listings sit in the residential subcategory, and even inside that subcategory a quarter of the titles do not claim a residential IP, with two describing server IPs outright. So read the individual listing rather than the shelf name. You can see the proxy and VPN listings and judge each one yourself, which is more than any summary here can do for you.

If you are buying instead of building

The reason to buy is to skip time you would otherwise spend, and that logic holds. What does not transfer with the account is the safety the time was supposed to buy, because the history was produced by someone else who may still be able to reach it.

In the first hour, in this order: take over the password, look at the list of active sessions and end the ones that are not yours, put two-factor under your own control, and change the recovery email and phone to addresses you hold. That last one matters more than it looks. If a verification is triggered later and the recovery contact still belongs to the previous owner, the code goes to them and you are locked out of an account you paid for. Compare a few X account listings on what they state about mail access and token format before you buy, since those two decide whether the takeover above is even possible. If growing an account you already control is the real goal, Twitter growth services are the other side of that decision.

Then, and only then, go slowly. Not to a schedule. Just slowly, because slowly is free and a schedule is fiction.