Security Guide
January 24, 20248 min read

Is Storm Client Bannable? What Jagex's Third-Party Client Policy Actually Says

Storm Client is not a Jagex-approved client, which makes it bannable on top of its malware risk. Here's exactly what Jagex's third-party client policy allows — and the two ways Storm Client can cost you your account.

There are two separate reasons not to use Storm Client, and most players only hear about one. The first is the credential-stealing malware in its Allure plugins. The second, which is just as real, is that Storm Client is not an approved client — so using it is a bannable offense under Jagex's rules.

Which clients does Jagex actually allow?

Jagex permits a short, specific list of third-party clients for Old School RuneScape:

  • The official Jagex client
  • RuneLite (open source)
  • HDOS
  • OSBuddy

Storm Client is not on that list. Anything outside the approved clients falls under Jagex's third-party client policy — the same policy used to action botting and cheating clients.

What happens if you're caught

Jagex has stated that accounts found using unapproved third-party clients face a temporary ban (commonly around two weeks) for a first offense, with permanent bans for repeat infringements. Detection has improved significantly, and ban waves for unapproved clients are routine.

The double risk

With Storm Client you are exposed to both problems at once:

  1. Account theft — the Allure plugins harvest your login, session tokens, and Discord data.
  2. A Jagex ban — for running an unapproved client in the first place.

Even in the impossible case that the malware did not exist, the ban risk alone makes it a bad trade.

The safe alternative

Use RuneLite launched through the official Jagex Launcher or the official RuneLite launcher. It is approved, free, open source, and has hundreds of legitimate plugins — with no ban risk and no malware.

Protect Your Account

If you've used Storm Client or Allure plugins, your account may be compromised. Take action now.