Original Post — Direct link

I am looking to make my account as secure as possible. Any recommendations?

Currently using 2-step authenticator and bank pin. No 3rd-party accounts linked to account. Using official runelite client.

Asking due to recent account hijacking: Hijacker was able to continually log in to my account for over a month without any notice (no password reset, email notifications, 2-step still enabled)

I appreciate all advise!

External link →
2 months ago - /u/Jagex_Melora - Direct link

Hey u/Fonduuu

Firstly, I'm sorry to hear that your account was hijacked, I know how stressful it is!

I would suggest the following after a hijacking:

  • Upgrade to a Jagex account, and secure your account with 2FA and save your back up codes both physically and digitally
  • Check your email is fully secure and not accessible to another person (I'd suggest 2FA for your email too) I'd also encourage you to review the inbox rules currently in place on your registered email address. If your registered email has been compromised, then a hijacker might have set up 'rules' which will redirect your incoming emails to another email address, meaning you might not be receiving important security information about your account
  • Be secure with your information and don't use the same password across numerous sites, following general cybersecurity advice about passwords (unique, 15+ characters, special characters)
  • Check your linked third party associations and remove any you do not recognise/secure your own third party associations
  • Check your devices for any malicious software and run regular virus/malware checks
  • Be careful with what links you click and where you're entering your information (more information on how to avoid phishing/scams can be found here)

Hopefully the above information helps to resolve this issue and helps to beef up your security for the future!