RuneScape Forum Archive | Not remembering account info

Unknown_RSPK

Posts: 11 Bronze Posts by user Forum Profile RuneMetrics Profile

Hi,

I'm a bit concerned about my account because I created it long time ago and I do not know any creation details other than maybe one or two passwords. I don't even remember the year it was created. I know many people who have been recovered and were unable to recover back there account and I'm worried if that happens to me one day. There was only one time when a friend of mine saw my password accidently when I put on a piece of not and that's all. I really need advice on this matter. I know there is a new Jagex account enhance security system which will help but that does not mean my account will not be recovered because even an account that's activated the new jagex enhanced security can still be recovered via the contact page here: https://support.runescape.com/hc/en-gb/articles/14070564253969

30-Apr-2023 05:12:13

May

2006

Malua

Posts: 43,113 Sapphire Posts by user Forum Profile RuneMetrics Profile

Hi there

Unknown_RSPK

Creation month/year:
Login and talk to Hans in Lumbridge. Hans will tell you exactly how old the account is and you can calculate the month/year of creation.
Creation ISP:
If you cannot remember the Creation ISP, ask family members if they can remember it.
Creation location:
You should know the creation location. It only needs to be town/country. If you live in USA, it needs to be town/state/country.
Early payment history:
If you no longer have a transaction ID of an early payment, you should still know who paid, how they paid and the payers postcode and email .

Write the above information down, including one or two early passwords and keep it safe.
That information is enough to get a recovery through to stage 2 and you can then add some more information e.g. emails that have been linked, address changes, other accounts you owned and played.

You will find that nearly everybody whose account is stolen by a hijacker has it stolen through a very recent insecurity event, as in getting phished.
The incidence of hijackers stealing accounts through recovery nowadays is almost nil.
Jagex addressed that particular issue well over ten years ago and mightily tightened up the recovery system to put a stop to it.
The only time accounts get recovered by a hijacker nowadays is because of account sharing. Account sharing throws doubt on who actually owns the account, causes more problems than it is worth and is against the rules anyway.

Once you have your notebook of account information, what can you do moving foward to keep your account protected?
Number 1: set up Authenticator!
Authenticator is critical to account security, particularly if you want to travel and access your account from another country.
Other things to do for security:
* check your email for unauthorised logins and change its password
* change the password to your RS account from time to time. Don't have to change it constantly TBC->

Forum Community Helper -

Information about Moderators and Community Helpers

30-Apr-2023 06:01:58

May

2006

Malua

Posts: 43,113 Sapphire Posts by user Forum Profile RuneMetrics Profile

> As I said, you don't have to change the password constantly but make sure you have more than a few passwords in the account history.
* be very wary of freebie offers on social media. Seriously, nobody is going to give you 2 billion gp in a giveaway/quitting giveaway etc.
* be careful if you link a third party account for shortcut logins. You have to maintain a super secure third party account as well as a super secure RuneScape account.

The support page you referenced: Unable to submit an account recovery due to invalid credentials does not provide a free pass to hijackers.
Anybody who uses the 'Contact Us' button on that page will have to prove that they created the account they are claiming.
It is a method for a player to take back an account a hijacker has stolen via upgrading it to the hijackers Jagex Accounts.
If Jagex finds the players claim to be valid, they will unlink and return the account.

Forum Community Helper -

Information about Moderators and Community Helpers

30-Apr-2023 06:11:05

Unknown_RSPK

Posts: 11 Bronze Posts by user Forum Profile RuneMetrics Profile

Hey thank you for the respone but I don’t know if that gives me the comfort to carry on playing because in the side of my mind I know how bad the recovery system could be on runescape. One more thing, why did my other thread get locked, the forum moderator said lets try and stick to one thread however that thread was different and not related to this one. Can you please unlock the thread or at least allow me to delete it.

Someone please respond to this thread at least allow me to delete this thread instead of locking it because it’s not related to this thread, it’s a different topic: Quick find code: 408-409-857-66279305

30-Apr-2023 16:00:16 - Last edited on 30-Apr-2023 16:04:01 by Unknown_RSPK

2_Tron

Posts: 23,025 Opal Posts by user Forum Profile RuneMetrics Profile

@Unknown_RSPK, this thread of yours is a thread where you are seeking for help with yours account-info issue. You got a lot of help from Malua, so make it benefit your issue and find the help you are looking for.

The other thread of yours wasn't about getting help moreso debating/discussing/argueing about what you find of the new Jagex accounts in relation to account recoveries.
That wasn't a thread for the sake of finding help with an account issue. Threads can't be deleted, only made hidden in exceptional cases.

If you wanna seek help, in terms of forum help, your best shot is in Forum Help V3 ... <- (link) in '
Community Home
-forums'.

30-Apr-2023 17:33:32

Unknown_RSPK

Posts: 11 Bronze Posts by user Forum Profile RuneMetrics Profile

I appreciate the support from the forum community helper however it doesn’t change the fact that a hijacker with sufficient evidence can still recover a targeted account even if you have the enhance Jagex account. It doesn’t change anything. As I said please hide my previous thread or allow me to edit it.

30-Apr-2023 18:05:51

2_Tron

Posts: 23,025 Opal Posts by user Forum Profile RuneMetrics Profile

Sorry that it took so long but here's more information about '
Jagex Accounts
'. Once migrated to a Jagex Account the owner of said account is the 'only person' who will receive 10 backup-codes in case of an emergency/recovery.
Only the owner is able to recover such account, on top you are able to 'change the login for a Jagex Account' that overrides all previous login details so in essence once you 'created your Jagex Account' nobody is able to figure out your 'new credentials'.

That's why you have to take your security very very serious before changing over to a Jagex Account.

Security tips ... <- (link).

Jagex Accounts closed beta ... <- (link) for more info about Jagex Accounts Beta.

30-Apr-2023 19:03:56

Unknown_RSPK

Posts: 11 Bronze Posts by user Forum Profile RuneMetrics Profile

That’s not true. Account “contact” page overrides your backup codes or any other MFA. If a hijacker has sufficient information (early creation details and passwords) they can potentially recover an account even if you have a Jagex account set with backup codes on this page:https://support.runescape.com/hc/en-gb/articles/14070564253969

For instance if you have your account details on paper and someone gets hold of that piece of paper they can recover your account even if they don’t have a backup code from the link I have sent above. How could Jagex possibly identify whether it’s the original owner or not if the hijacker has the same exact account information as the original owner? Yes, the new system is good but it can be better. They need to remove the contact page and the only way to recover a Jagex account should be through a backup code.

30-Apr-2023 19:48:02 - Last edited on 30-Apr-2023 19:48:42 by Unknown_RSPK

2_Tron

Posts: 23,025 Opal Posts by user Forum Profile RuneMetrics Profile

I know it is/can be very confusing right now as we momentarily are in a 'transfer-time' where we are having '
RuneScape Accounts
' and are changing towards '
Jagex Accounts
' and the processes that are attached to said account can be different/vari than about the account-issues you are talking about now.

The examples you are bringing up still do talk about '
RuneScape Accounts
', there are no examples that handle '
Jagex Accounts
'.
I can't say if everything can simply be compared 1 on 1, all being the same.

30-Apr-2023 21:23:36

Unknown_RSPK

Posts: 11 Bronze Posts by user Forum Profile RuneMetrics Profile

I am speaking of a “Jagex account” and not a “Runescape account” and no your account is never completely safe if that contact page remains for the reasons I’ve mentioned in my previous reply still remains true. It is still valid for a “Jagex account” as well. If two people have the same information they can simply visit the contact page and recover the account which is protected by a “Jagex acccount” whether it’s the original owner or not Jagex will not know, it will be difficult for Jagex to know who is the creator of the account. I really don’t care what Jagex has to say about this whether they take other things into consideration for instance “ we take the location into consideration as well”. I’m sorry but there are psychopaths out there who will recover your account on your network without you even realising. So remove the contact page if you want to protect a “Jagex account”. I even tried the contact page my self on one of my account that’s protected by a “Jagex account” and the Jagex employee was ready to help me recover the account account which was protected by the “Jagex account”. There’s no way a Jagex employee knowing who’s behind the computer even if it’s on the same network, so the only way to recover a “Jagex account” should be back up codes. And now you’re still saying this isn’t possible on a “Jagex account”. I can show you the email. You are never safe but protected to a degree.

30-Apr-2023 22:15:52 - Last edited on 30-Apr-2023 22:20:12 by Unknown_RSPK

Forums

Not remembering account info