[2019] Anything else to add to account security?

I see this coming up a lot, so here's my general advise as a web developer:

• Use a password manager that creates a different password for all your credentials (LastPass, KeePass, etc)
• Make sure your password manager, your email, and your RuneScape account all have 2FA activated
• Be careful with social engineering (the act of finding information about you to use in the recovery questions)

These 3 steps make it so that in the vast majority of cases, your account is secure. Once step (1) and (2) are done, you only need to be careful with step (3). If your security question was "What's the name of my first pet?", and then you go on social media and say "My first pet ever, Peepoo, is so cute", you are opening yourself up to being hacked. Choose security questions that are personal and memorable, don't share their answers, and you should be just fine.

• Specifically in RuneScape, add a bank pin too

I don't know enough about KeePass, but LastPass seems to be safe. Of course, you're always trusting the developers of LastPass to not be shady, right? But that happens with everything. You trust your bank to not be shady, your email, facebook etc. There is a line that you can't go any further than that.

So for now I'd vouch for LastPass. Its last breach was, AFAIK, in 2015, and you were safe since (quote) "your passwords are salted, hashed and stretched, and only ever stored in that scrambled, irreversible form".

I use LastPass, have been using it for years, and didn't have any problems with it ever. And it's nice to not feel the "fear" of a hack!