Take action to keep your account out of the wrong hands. If your account is currently hijacked, recover it here.
Set a unique password
Use a unique password for all of your online accounts. That way, if one is compromised, your other accounts remain secure.
A good password should be memorable but difficult to guess or brute force. Having unique passwords for your entire online presence can be hard to manage, so consider using a password manager.
Enable the authenticator
Setting up the authenticator adds an extra layer of security to your game account, and protects unauthorised access even if a hijacker knows your password. However, if a hijacker accesses your email account they could disable your authenticator, so it's vital you keep your email secure too.
Protect your email address
A secure email address will help keep your other accounts safe, so be sure to set a strong password and utilise your email provider's security features such as 2-factor authentication. Check out the advice from some popular email providers:
Secure your device
Keeping your device locked with a passcode can keep it safe from any nearby threats. You should also enable your preferred antivirus and anti-spyware software and scan your device regularly.
You can also activate your browser's phishing filters to alert you of potentially unsafe websites. Here's how to enable phishing filters on some popular browsers:
Secure any linked accounts
If your game account is linked to a third party ensure you've utilised the third party account's security features such as Google's 2-step verification, Apple's two-factor authentication or Steam Guard.
Remove unknown linked accounts
If someone hijacks your game account, they can link their own third party login (such as through their Google or Steam account) and access your account even if you change your password. Regularly check and remove any unrecognised linked accounts.
Stay up to date
Keep your operating system and applications up to date. Missing a critical security update could make your device less secure. A quick search in your favourite search engine will provide you with some steps.
Manage active sessions
If you've forgotten to log out of your account on a shared device or suspect a third party has access to your account, you can end all active sessions which will log you out on all devices.
Set a RuneScape Bank PIN
A Bank PIN works like a PIN code for your credit card; hijackers won't be able to access the items in your Bank without knowing the PIN.
Avoid phishing and scams
Follow these helpful tips to avoid being phished or scammed.