A Dutch security researcher has claimed that he was able to successfully log into US President Donald Trump’s Twitter account last week, by correctly guessing his password: ‘maga2020!’ No surprises there.

Victor Gevers, an internet security expert at the GDI Foundation and chair of the Dutch Institute for Vulnerability Disclosure, has said that he successfully managed to gain access to the US President’s Twitter account. According to Dutch newspaper De Volkskrant, Gevers wanted to see how strong the President’s online security was.

Gever’s revealed that the two-factor authentication, which provides extra security to the account having 87 million followers, was disabled, thus allowing him access to the account.

RELATED STORIES

A screenshot of Trump’s twitter account

After logging in, the hacker alerted the Cybersecurity and Infrastructure Security Agency (CISA), a unit of Homeland Security, about the security leak. He said he noticed that Trump’s Twitter password was changed shortly after.

This, however, is not the first time the Dutch hacker succeeded in taking over Donald Trump’s Twitter account. Four years ago, the same hacker with his other two accomplices, jointly managed to access Trump’s account, just a few weeks prior to the US elections. At that time, “Yourefired” was Donald Trump’s Twitter password, claimed the hackers.

It was reported that Gevers only wanted to raise awareness of the fact that two-factor-authentication should be mandatory for everyone.

Previously in 2016, Trump’s staff was warned by the hackers that they needed to change the settings of the official accounts. Alex Wall, who was the director of Hillary Clinton’s social media in 2016 and also managed Barack Obama’s official accounts, referred to Trump’s Twitter practises as “insanely irresponsible”.

However, claims of the Dutch hacker are being treated with extreme skepticism by official sources and security experts. Twitter gave a statement that there’s no evidence to corroborate the claim.

Additionally, White House press secretary Judd Deere has also denied the claims.

“This is absolutely not true”, said Deere. “But we don’t comment on security procedures around the President’s social media accounts.”

One inconsistency with the claim is the fact that Twitter’s requires a strong password to be “at least 10 characters long”, while ‘maga2020!’ password has only nine characters. Additionally, the absence of two-factor-authentication on the Twitter account of the President of a country and the use of weak and simple password seems absurd.