I had a bank pin, my security questions were five strings of numbers and letters, I don't know what I could have done to make it more secure. I use only the RS Official Client, as I think it runs faster than the website. So i have changed my pin and my security questions, and am using a totally different machine now as I got a new laptop for Uni anyways. Also, on average it would take a brute force program being run from a top end desktop 408 thousand years to crack a password of the same length with varied caps/numbers like mine. Again, i highly doubt I received a keylogger, but I am using a new laptop anways now. The only things related to RS I ever downloaded was the RS client from the RS website. And Tipit is the only other RS related thing I go on. It turns out that due to my Uni's firewall I couldn't have gotten any of these things anyway, which means it must have been someone actually recovering my account rather than hacking it. All it took to recover my pure was a single previous password, no other information that I could remember, so I suspect the same thing could have happened here - as though my password is very secure now, I have had easy to guess passwords in the past, as many people probably have. On a side note, I started merching an item a top player accidently included in a video (the bought x/y message popped up in his chatbox :P ) and have now paid my mate back and am well on the way to having my mask back as well. So its not all bad!