Storm Client Protection Guide

What you need to do right now

1
Change your password immediately
Go to the Jagex website and change your password. Don't use the game client - it might still be compromised.
2
Enable authenticator
If you don't have 2FA enabled, do it now. This will stop them from logging in even if they have your password.
3
Delete Storm Client completely
Uninstall Storm Client and all Allure plugins. Use official RuneLite instead - it's open source and safe.
4
Check your account
Look at your bank, recent trades, and login history. If anything looks suspicious, contact Jagex support immediately.
5
Run antivirus
Scan your computer to make sure nothing else was installed. These plugins could have dropped other malware.

Additional Security Recommendations

  • • Monitor your email for any password reset attempts or suspicious activity
  • • Check your Discord account for unauthorized access or messages
  • • Review your bank PIN and consider changing it
  • • Enable login notifications if available
  • • Consider using a password manager for unique, strong passwords