Complete Guide to Setting Up RuneScape Authenticator

Two-factor authentication (authenticator) is the single most important security feature you can enable on your RuneScape account. Here's how to set it up properly.

What Is Authenticator?

RuneScape Authenticator is a two-factor authentication system that requires both your password and a time-based code from your phone to log in. Even if someone steals your password (like through Storm Client malware), they can't access your account without your phone.

Step-by-Step Setup

1. Download an Authenticator App

You'll need one of these apps on your smartphone:

• Google Authenticator (iOS/Android)
• Microsoft Authenticator (iOS/Android)
• Authy (iOS/Android)

2. Log Into Your Jagex Account

• Go to secure.runescape.com
• Log in with your email and password
• Navigate to Account Settings

3. Enable Authenticator

• Click "Set up Authenticator"
• You'll see a QR code on screen
• Open your authenticator app
• Tap "Add account" or the + button
• Scan the QR code with your phone's camera

4. Save Your Backup Code

This is critical: Jagex will show you a backup code. Write this down and store it somewhere safe (not on your computer). If you lose your phone, this code is the only way to access your account.

5. Enter the Verification Code

• Your authenticator app will show a 6-digit code
• Enter this code on the Jagex website
• Click "Verify"

6. Test It

• Log out of your account
• Try logging back in
• You should be prompted for an authenticator code
• Enter the code from your app

Common Issues and Solutions

Code Not Working

• Make sure your phone's time is set to automatic
• Wait for a new code to generate (they change every 30 seconds)
• Check that you're entering the code for the correct account

Lost Your Phone

• Use your backup code to disable authenticator
• Set up authenticator again on your new phone
• Generate a new backup code

Can't Scan QR Code

• Click "Can't scan?" on the Jagex website
• You'll get a text code instead
• Manually enter this code in your authenticator app

Additional Security Tips

Use a Bank PIN

Even with authenticator, set a bank PIN. This adds another layer of protection for your items and gold. Note that changing or removing a PIN has a 3-7 day delay.

Secure Your Email

Enable two-factor authentication on the email address linked to your RuneScape account. If someone compromises your email, they can disable your authenticator.

Don't Trust "Remember This Device"

RuneScape offers to remember your device for 30 days. Only use this on your personal computer, never on shared or public computers.

What If You've Been Compromised?

If you used Storm Client or suspect your account is compromised:

1. Change your password immediately
2. Disable and re-enable authenticator (generates new secret key)
3. Change your bank PIN
4. Check your account for unauthorized activity

Why Authenticator Matters

The Storm Client malware stole thousands of passwords. But accounts with authenticator enabled remained safe because the attackers couldn't generate the time-based codes. This one feature makes the difference between a secure account and a compromised one.

Don't wait until it's too late. Set up authenticator today - it takes 5 minutes and could save years of progress.