How does the account recovery system work? My account was recently hijacked using that system, and I would like to avoid it happening in the future. Which e-mail accounts are allowed to recover accounts? The e-mail that worked when I attempted to recover my own account, is a much older email than the one that I use regularly, and the one that I use regularly(and which works on the Jagex site) was not elligible to use for a recovery attempt, why is that? Also, I can see that recovery requests were sent with and accepted for my older e-mail that I had nothing to do with. Am I correct in assuming that that is how the person gained access to my account? If so, what are some ways that someone could have gained access to my unused e-mail account as well as my main e-mail account(the main one had its password changed?) I have not actually typed the password to either in months because I have a fingerprint scanner, and the only non Jagex websites that I visit are this one and the wiki, I do not think that a keylogger(or at least what I think a keylogger is) is involved here, so how could someone have gained access to my email accounts? That is significantly more worrying than my runescape account due to how many important things I have linked back into my main email address.

.

This same question pops up every single day.

 

 

Tip.it got hacked. It's databases with ip-s, passwords and emails are in the hands of hackers.

Now if your tip.it's password matches your previous RuneScape or email password, it can easily be used to recover your account.

 

 

And what dad said.

EDIT: Removed hacker shenanigans.

Lmao x].

 

I am not giving you gp til I know you aren't getting hijacked again :(

This same question pops up every single day.

 

 

Tip.it got hacked. It's databases with ip-s, passwords and emails are in the hands of hackers.

Now if your tip.it's password matches your previous RuneScape or email password, it can easily be used to recover your account.

 

 

And what dad said.

 

Everyone needs to remember to scan and change everything every time a site they use/used gets hacked, I guess.

And sites need better god damn security. That ip shit is BULL, if I get hacked tip.it can kiss my ass goodbye.

I'm not a computer expert but it is possible to brute force your password (going through every possible password combination until it works). They could have used that to get access to your email which was then used to recover the account.

 

I recommend using Gmail with 2 step verification (after entering your password it sends a 6 digit code via SMS or call to your cell phone.

 

The wiki was also hacked some time ago but I doubt that was the cause either as I fail to see why if they had control of your password they would wait months and risk you changing it...

Well apparently someone has access to my tip.it account, so I'm off to change this password too...

 

I must have changed my password on here back to the same one as before the hack unintentionally...that is the problem with having a scanner, I can't remember where or when I've actually used the passwords from my pool.

 

Does anyone here know if during the Tip.It hack linked e-mail information was compromised as well? I'm assuming that the email that I used to create the account on here was the old email, which apparently has the power to recover my RS account for some reason. Is there a way to choose which email address has recovery power?

 

My scans have not turned anything up so I am assuming that what Kaur suggested must have happened, which makes me feel a good bit better about the whole situation if only a few coins(and my rapier :roll: ) are lost but my computer is clean, since the hacker was kind enough to make an appearance and confirm that he had this password.

Does anyone here know if during the Tip.It hack linked e-mail information was compromised as well? I'm assuming that the email that I used to create the account on here was the old email, which apparently has the power to recover my RS account for some reason. Is there a way to choose which email address has recovery power?

 

When TIF was hacked way back in october, it was said to assume the absolute worse when they accessed the database. If your email used to register on Tip.it was the same you attached to your RuneScape account and they recovered your email account (incredibly easy if it's a hotmail/yahoo account) they might have used it to reset your password. So if you didn't take extra lengths to check the security of your email, as was recommended, that could be how they compromised both your TIF and RS account.

I'm not a computer expert but it is possible to brute force your password (going through every possible password combination until it works). They could have used that to get access to your email which was then used to recover the account.

 

I recommend using Gmail with 2 step verification (after entering your password it sends a 6 digit code via SMS or call to your cell phone.

 

The wiki was also hacked some time ago but I doubt that was the cause either as I fail to see why if they had control of your password they would wait months and risk you changing it...

The wiki was never hacked.

I'm not a computer expert but it is possible to brute force your password (going through every possible password combination until it works). They could have used that to get access to your email which was then used to recover the account.

 

I recommend using Gmail with 2 step verification (after entering your password it sends a 6 digit code via SMS or call to your cell phone.

 

The wiki was also hacked some time ago but I doubt that was the cause either as I fail to see why if they had control of your password they would wait months and risk you changing it...

The wiki was never hacked.

 

I think he was referencing when there were some malicious ads that placed java exploits on the person's system. Myself and a few other people I know were hacked as a result. Rswiki corrected the problem advert quickly, though.