I don’t think it’s your password - more likely a connected app posting to your timeline which doesn’t use your password. twitter.com/donmcallister/…