Forums

concerned

Quick find code: 408-409-500-66282475

jodie
May Member 2018

jodie

Posts: 2,634 Adamant Posts by user Forum Profile RuneMetrics Profile
I have my main and all alternates connected to a Jagex Account. A friend is interested in connecting her main to a Jagex Account but is concerned. So I'm asking for her:

What does one do to protect your account (or save it) should someone get onto your account and change the email address? That of course is the email you login with.
I am what I am! Acknowledging this is the beginning; and my growth is yet to end!
II Cor. 5:7 "We walk by faith! Not by sight!"

25-Jun-2023 02:09:18

Malua
May Member 2006

Malua

Posts: 43,113 Sapphire Posts by user Forum Profile RuneMetrics Profile
Hi there
jodie


It is harder for a hijacker to get into a Jagex Account.
They need the players Authenticator code to gain login access.
This cannot be bypassed if the player has set up an Authenticator.

If the player has not set up an Authenticator, each login requires a security code that is emailed out. So, if the hijacker already has access to the players email and the player does not have Authenticator set then conceivably they can get into the players RuneScape account and steal it by changing the registered email.

If that happens the player needs to use one of the ten backup codes they were given at Jagex Account setup.
The backup code would get them back into their account and they could secure it again.

The onus is on the player to keep their email secure and I strongly recommend the player uses Authenticator and doesn't rely on emailed out security codes each login.
Forum Community Helper -
Information about Moderators and Community Helpers

25-Jun-2023 04:15:02

jodie
May Member 2018

jodie

Posts: 2,634 Adamant Posts by user Forum Profile RuneMetrics Profile
Oh dear I do so wish I understood what you just said Malua. It sounds clear enough but is not concrete enough for me to put it into pictures. :( (

Seems if another finds a way to get into your email, you are pretty much ruined as far as the game goes. Also seems if your email is one that simply gets shut down (due to no fault of your own...such our first email out here in the country was a phone-line and got closed; and there was no way to access it) then you are also doomed.

As for the authenticator. I've never understood that. :(

And what are these "...ten backup codes they were given at Jagex Account setup..." I never got anything like that! Where are they? (Sure wish you would contact me in game so we could talk at length from the lobby.)
I am what I am! Acknowledging this is the beginning; and my growth is yet to end!
II Cor. 5:7 "We walk by faith! Not by sight!"

25-Jun-2023 04:25:08

jodie
May Member 2018

jodie

Posts: 2,634 Adamant Posts by user Forum Profile RuneMetrics Profile
Oh I do not have a cell phone; just one land-line old fashioned phone.
I am what I am! Acknowledging this is the beginning; and my growth is yet to end!
II Cor. 5:7 "We walk by faith! Not by sight!"

25-Jun-2023 04:30:45

Malua
May Member 2006

Malua

Posts: 43,113 Sapphire Posts by user Forum Profile RuneMetrics Profile
Go to the Upgrade your RuneScape character to Jagex account support page and watch the video there.

The video has no sound but everything is explained reasonably clearly and it can be watched and re-watched.

I didn't understand Authenticator either initially but I got a family member to set it up for me and it really is quite simple.
If you don't have a cell phone, Authenticator can be set up on your computer (desktop/laptop) or on a USB stick.
More and more websites are promoting Authenticator use nowadays as malicious online activity is getting more devious and harder to avoid.

You don't have to have the same email for both your login and registered email. Setting a different email will make it harder for a hijacker.

Re those ten backup codes, head into Account Management and see if you can replace them with ten new ones. I am not sure if it can be done but it is worth a try and there is a 'replace' button in there.
Forum Community Helper -
Information about Moderators and Community Helpers

25-Jun-2023 04:45:48

jodie
May Member 2018

jodie

Posts: 2,634 Adamant Posts by user Forum Profile RuneMetrics Profile
Malua I went into "account management" and this is what was found:
IN MY ACCOUNT MANAGEMENT: (main page after login) The first blue hyperlink took me to "account management" where the following were:
"jagex launcher download"
Jagex account name is .....
email is .....
password .....
Each of the above 3 had the options of changing them........

This page also spoke of "2-step authentication"
Two-step authentication adds an extra layer of protection to your account by requiring you to enter a security code each time you try to log in. You can choose to receive these codes by email or via an authenticator app you install on a mobile device. If you lose access, you can use one of your account's backup codes to log in.
Security codes via authenticator app (shows a hyperlink to "enable" this)
Security codes via email (shows no hyperlink that can be clicked. Has the words "enabled" and a grey box with "disable&quot ;)
Backup codes (shows a darkened box with "replace" inside; and there is no hyperlink here)
Characters (is a blue "characters" hyperlink)
Language preference ("english&quot ;)
A grey box with "save changes"
Then also on this page are the 3 "accepted legal agreements"
Under this is information about "export data" and "active sessions"
Under "export data" is the information:
...download a copy of the personal data you have provided while using your Jagex account
...A computer readable file will be generated containing the personal data held on your account
...Data held about any of your RuneScape characters is not included.
Under this is the hyperlink words "Find out how to export this information" and then the hyperlink button "export".

Under "Active Sessions" there is information about that with a red hyperlink "End all sessions"

I found no backup codes.
I am what I am! Acknowledging this is the beginning; and my growth is yet to end!
II Cor. 5:7 "We walk by faith! Not by sight!"

25-Jun-2023 18:57:31 - Last edited on 25-Jun-2023 19:04:14 by jodie

Applejuiceaj
Nov
fmod Member
2011

Applejuiceaj

Forum Moderator Posts: 45,000 Sapphire Posts by user Forum Profile RuneMetrics Profile
Backup codes aren't provided unless you have enabled 2 factor authentication via authenticator app.

The expectation is that you will always have access to your email address. Chances are your email account is secured via similar 2 factor means.

With an authenticator app, its possible that I lose access to the device with the app on it - for example, if I were to trade in my phone and get a new one. Backup codes are in place for that purpose, allowing me to provide one of them to verify its me attempting to log in so that I may disable the existing authenticator and re-enable it, using my new device to generate codes.

That scenario doesn't apply to an email account, so there is no need for Jagex to provide backup codes to players who are only using email-based verification.

25-Jun-2023 23:13:14

Quick find code: 408-409-500-66282475 Back to Top