How to Protect Your RuneScape Account: Complete OSRS Security Guide 2024
8 min read
Updated January 2024
If You've Used Storm Client
If you've used Storm Client, your account may already be compromised. Follow steps 1-3 immediately, then continue with the complete security guide.
Why Account Security Matters
Your RuneScape account represents hundreds or thousands of hours of gameplay, valuable items, and personal progress. Account theft can result in the loss of everything you've worked for. This comprehensive guide will help you secure your account against the most common threats.
6 Critical Security Steps
Follow these steps in order to maximize your account security. Each step builds upon the previous ones to create a comprehensive security strategy.
1
Enable Authenticator
Add two-factor authentication to your account
Critical
5 minutes
Download an authenticator app (Google Authenticator, Authy, or Microsoft Authenticator)
Go to your Jagex account settings
Navigate to the Security section
Click 'Enable Authenticator'
Scan the QR code with your authenticator app
Enter the 6-digit code to verify setup
Save your backup codes in a secure location
2
Create a Strong Password
Use a unique, complex password for your account
Critical
10 minutes
Use at least 12 characters with mixed case letters
Include numbers and special characters
Avoid common words or personal information
Don't reuse passwords from other accounts
Consider using a password manager
Change your password regularly (every 3-6 months)
Never share your password with anyone
3
Use Safe Clients Only
Only use verified, safe RuneScape clients
Critical
15 minutes
Download RuneLite from the official website (runelite.net)
Avoid Storm Client and other third-party clients with malware
Verify you're on the official website before downloading
Check for SSL certificates and official branding
Read reviews and community feedback before using new clients
Avoid clients that require paid subscriptions
Stick to open-source or officially approved clients
4
Monitor Account Activity
Regularly check for suspicious activity
High
5 minutes weekly
Check your account login history regularly
Monitor your bank for missing items
Review recent trades and transactions
Watch for unexpected friend requests or messages
Check your email for account-related notifications
Look for any changes to account settings
Report suspicious activity immediately to Jagex
5
Secure Your Email
Protect the email associated with your account
High
10 minutes
Use a strong, unique password for your email
Enable two-factor authentication on your email
Use a dedicated email for gaming accounts
Avoid using public or shared email accounts
Regularly check for phishing emails
Don't click suspicious links in emails
Keep your email software updated
6
Be Cautious Online
Avoid common security pitfalls
Medium
Ongoing
Never share account information with anyone
Avoid clicking suspicious links or downloads
Don't enter your password on unofficial websites
Be wary of 'free' offers that seem too good to be true
Don't trust random players offering help or services
Avoid sharing screenshots that show account details
Use common sense when interacting online
Warning Signs Your Account May Be Compromised
If you notice any of these signs, take immediate action to secure your account:
Unexpected Login Attempts
You receive emails about login attempts you didn't make
Action: Change your password immediately and enable authenticator
Missing Items or Gold
Items or gold are missing from your bank or inventory
Action: Check your account activity and contact Jagex support
Suspicious Trades
You see trades in your history that you didn't make
Action: Review all recent trades and report suspicious activity
Changed Account Settings
Your account settings have been modified without your knowledge
Action: Reset your password and check all account settings
New Friends or Messages
You have new friends or messages you didn't add or send
Action: Remove suspicious friends and change your password
Email Notifications
You receive unexpected emails about account changes
Action: Don't click any links in the email, log in directly to check
Advanced Security Measures
For maximum security, consider these additional measures:
Password Manager
• Use a reputable password manager (LastPass, 1Password, Bitwarden)
• Generate unique, complex passwords for all accounts
• Store passwords securely with encryption
• Enable two-factor authentication on your password manager
• Regularly update and audit your stored passwords
Regular Monitoring
• Set up email notifications for account changes
• Check your account activity weekly
• Monitor your bank and inventory regularly
• Keep a record of valuable items and their locations
• Take screenshots of important account information
What to Do If Your Account Is Compromised
If you suspect your account has been compromised, act quickly:
1. Change your password immediately - Use a strong, unique password
2. Enable authenticator - Add two-factor authentication if not already enabled
3. Check your account activity - Review login history and recent trades
4. Secure your email - Change your email password and enable 2FA
5. Contact Jagex support - Report the compromise and request account recovery
6. Document everything - Keep records of suspicious activity and recovery attempts
7. Scan your computer - Check for malware that may have caused the compromise
Common Security Mistakes to Avoid
Don't Do These
• Share your password with friends or family
• Use the same password for multiple accounts
• Click suspicious links in emails or messages
• Download software from unofficial sources
• Trust random players offering free items or services
• Use public computers to log into your account
• Ignore security notifications or warnings
Do These Instead
• Keep your password private and secure
• Use unique passwords for each account
• Verify links before clicking them
• Only download from official, verified sources
• Be skeptical of offers that seem too good to be true
• Use your own secure devices for account access
• Take all security warnings seriously
Security Checklist
Use this checklist to ensure your account is properly secured:
Account Security
Authenticator enabled
Strong, unique password
Email account secured
Backup codes saved
Client Security
Using safe client (RuneLite/Official)
Avoided Storm Client and malware
Downloaded from official sources
Regular client updates
Staying Secure Long-Term
Account security is an ongoing process. Here's how to maintain your security:
Monthly: Check your account activity and review recent trades
Quarterly: Change your password and review security settings
Annually: Review and update all security measures
As needed: Update your client and security software
Always: Stay informed about new security threats and best practices
Need More Security Information?
For detailed security analysis and additional protection guides.