Take action to keep your account out of the wrong hands. If your account is currently hijacked, recover it here.
This page contains helpful information on how to secure not only your RuneScape character, but also a Jagex Account. If you do have a Jagex Account, you have additional security features, which are also described here.
Upgrade to a Jagex account
The best recommendation we can make to any player who is concerned about account security is to upgrade to a Jagex account.
Jagex accounts allow you to bring all your existing characters together and protect them with the highest level of account security.
Once you've upgraded to a Jagex Account, it is important to ensure you have no third party accounts linked to any of your characters, that you do not recognise. You can check out sections 'Secure any linked accounts' and 'Remove unknown linked accounts' for further information.
Set a unique password
Use a unique password for all of your online accounts. That way, if one is compromised, your other accounts remain secure.
A good password should be memorable but difficult to guess or brute force. Having unique passwords for your entire online presence can be hard to manage, so consider using a password manager.
If you upgrade to a Jagex Account, you will benefit from the ability to have a longer and more complex password.
Enable the authenticator
Setting up the authenticator adds an extra layer of security to your game account, and protects unauthorised access even if a hijacker knows your password. However, if a hijacker accesses your email account they could disable your authenticator, so it's vital you keep your email secure too.
Most common authenticator app providers offer the ability to backup the app, this will allow you to recover your app should you lose it or your device.
Protect your email address
A secure email address will help keep your other accounts safe, so be sure to set a strong password and utilise your email provider's security features such as 2-factor authentication. It's important to check any rules or filters set up on your email account, especially if you suspect your email may have been compromised. Most providers offer guides on how to check, for example see Gmail's guide on creating and editing rules/filters.
Check out the security advice from some popular email providers:
Secure your device
Keeping your device locked with a passcode can keep it safe from any nearby threats. You should also enable your preferred antivirus and anti-spyware software and scan your device regularly.
You can also activate your browser's phishing filters to alert you of potentially unsafe websites. Here's how to enable phishing filters on some popular browsers:
For general advice on how to stay safe and secure online, you can check out this page on the National Cyber Security Centre's website.
Secure any linked accounts
If your game account is linked to a third party ensure you've utilised the third party account's security features such as Google's 2-step verification, Apple's two-factor authentication or Steam Guard.
Remove unknown linked accounts
If someone hijacks your game account, they can link their own third party login (such as through their Google or Steam account) and access your account even if you change your password. Regularly check and remove any unrecognised linked accounts.
Stay up to date
Keep your operating system and applications up to date. Missing a critical security update could make your device less secure. A quick search in your favourite search engine will provide you with some steps.
Manage active sessions
If you've forgotten to log out of your account on a shared device or suspect a third party has access to your account, you can end all active sessions which will log you out on all devices.
Set a RuneScape Bank PIN
A Bank PIN works like a PIN code for your credit card; hijackers won't be able to access the items in your Bank without knowing the PIN. The time it takes to remove a Bank PIN can be set to either 3 days or 7 days, check out the Bank PIN Support page for further information here.
Avoid phishing and scams
Follow these helpful tips to avoid being phished or scammed.