Security Title

These pages contain the basic information needed to keep your RuneScape account secure. If you are currently in the process of being hijacked, please click here if your registered email hasn't been changed and here if it has.

Account Title

It doesn't require much time or effort to secure your RuneScape account. Here's a few simple steps that you can follow to make sure that your RuneScape account is as secure as possible

1. Protecting Your Computer

The first steps to take when setting up the security on your account is making sure that you have a secure computer. Ideally, at the very least, you'll want to run up to date antivirus, antispyware and a firewall.

There are plenty of paid for and free options out there but here's a few that we recommend:

Anti-Spyware Software

Anti-Virus Software

Firewall Software

Once you have your chosen software installed, make sure that you run a full system scan, to ensure that there is no malicious software already on your computer.

2. Creating a Secure Email Account

Next you'll want to create a brand new email account to register on your RuneScape account. The security of this email account is very important so we recommend that you don't use it on any other websites, especially websites that are associated with RuneScape (such as fan or clan sites).

Once you've created your email account, you'll need to set up 2-step verification. This will help to prevent people from accessing your email account, even if they manage to learn your password.

Here are guides for setting up 2-step verification on some of the biggest email providers:

3. Setting Up The RuneScape Authenticator

Setting up the authenticator is incredibly simple and takes less than 60 seconds! Click here to begin the process of adding authenticator to your account

Don't have a mobile phone? Don't worry, we've made this handy guide for setting up the authenticator using your PC or laptop

If you get stuck at any point, be sure to check out the Authenticator FAQ for answers to the most common questions or check out this short video for a step-by step guide:

4. Adding a Bank PIN

If, through some incredibly unfortunate string of events, someone manages to make it through all these other security measures, there is one final feature to help keep your items safe

The bank PIN can be activated from any bank within OldSchool. Just talk to any Banker

Bank PIN1

Ask to check your PIN settings

Bank PIN2

And follow the on screen instructions

Bank PIN3

Staying Title

Although the advice given previously will give you a great foundation for keeping your account secure, there are also a number of other threats that you need to be aware of when using the internet or playing OldSchool

1. Phishing Emails

Phishing emails will typically be sent on mass to hundreds of people, many of which don't even have a RuneScape account. These emails are designed to look as though they have been distributed by us and contain links to malicious websites that are designed to steal your login information or infect your computer with malicious software.

There are a few things that you can be on the lookout for, whenever you receive an email that claims to be from us


If you are unsure if an email is legitimate, make sure that you NEVER click any links in it. Just go to the RuneScape homepage and log into your account on the website

You can forward any phishing emails that you receive to our investigation team at

2. In-game Phishing

Phishing that takes place in-game will usually take one of the following three forms:

Telling you to search for a page or video on social media sites

YouTube Phishing

The pages that these accounts are telling you to search for will typically contain links to phishing sites or keyloggers. Please make sure that you NEVER click these links.

If you come across one of these videos, be sure to flag it on YouTube and/or report the spamming account through our report abuse system

Advertising a new cheating tool, such as a botting website

Bot Phishing

These are very similar to the first example. The accounts advertising these websites are typically hijacked by the same website that they're directing you to

Offering you a moderator position

Mod Phishing

We will never, ever PM you in game to offer you a moderator position. This will always be done via a message to your RuneScape inbox. If a JMod does ever contact you in game, they will have a gold crown Crown next to their name

Hopefully the information on this page is enough to keep your account secure. If you have any more questions or need help with your account, please be sure to check out the Support Section of the RuneScape homepage