OSRS Account Security Checklist

Losing an account to a hacker is far worse than any bad trade. These steps take about ten minutes and block most of the ways accounts get stolen.

The checklist

1. Use a Jagex Account with an authenticator. Two-factor authentication with an authenticator app stops someone logging in even if they have your password.
2. Use a unique password. Never reuse your RuneScape password anywhere else. A password manager makes this easy.
3. Secure your email. Your email is the key to recovering your account, so give it a strong password and 2FA too.
4. Set a bank PIN. It adds a second lock on your bank, even if someone gets into your account.
5. Only log in through the official launcher or by typing the official address yourself. Never through a link in a message.
6. Avoid third-party clients and plugins you don't trust. Stick to well-known, approved clients.
7. Never share login details or codes with anyone, including "Jagex staff", gold sites or friends.

Warning signs

• Emails or messages saying your account will be banned unless you "verify" it.
• Offers of free membership, bonds or gold in exchange for logging in somewhere.
• Anyone asking you to read out a code that was just sent to you.

If you think you've been hacked

Change your password from the official website, secure your email account and use Jagex's official account recovery if you're locked out. Then check your bank and Grand Exchange history.