We use OAuth 1.0A on the Twitter API. Make sure you’ve read all about it here: [node:3240]. Typically, you won’t have users directly enter logins and passwords into your application but instead within a web browsing experience on twitter.com and through a series of back-and-forth requests you’ll get an access token representing their consent and identity.