Twitter on Thursday urged its more than 300 million users to change their passwords, saying they had been unintentionally "unmasked" inside the company by a software bug.