I wish twitter would be more specific about whether a suspicious login was actually successful or not. I’m going to be all paranoid about that for a while.
And yes, I’ve just changed my password.
I make all my passwords super-hard gobbledygook that only my password manager can remember.