Skip to content
View in the app

A better way to browse. Learn more.

Tip.It Forum

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Locked Account? Passwords Leaked? - Main Discussion Thread

Featured Replies

Try putting your friends list, as many people as you can remember.

  • Replies 131
  • Views 8k
  • Created
  • Last Reply

Top Posters In This Topic

i have appealed to get my acc back, we'll see

 

i know its upsetting news, and im not pointing fingers,

 

but no need to get angry at other players hey..

 

best advice from me is; send in a well written and thought out request, and wait..

 

 

 

peace

wad if u use ur old password from ur rs acc to this forum acc is there a possiblilty ur acc could get locked?

For the blankbox in the recovery query, state the history of your account etc when it was created when it was inactive, i used it to unlock my account even though there were no recoverys.

Well i have the same rsn and forum name but my account has not been locked but i do have different passwords for them so is it the same name and they get locked or is the same pass

 

 

 

Plz i need to know because i need to know if my account is safe

 

Thanks

now that most people have set there questions we are all happy, my account is also safe :P well cant you guys show a Thread of loyalty to this site? its done wonders for everyone here, you know it. its help you sell your items, make new friends, conquer quest and give you good places to train, so why cant you guys be happy once in a while?? :( :roll:

i became member last year, but i forgot my agreement number, do any of u have any suggestion to what i should do :cry:

When the database got leaked, was it decrypted for some reason?

 

 

 

I thought that phpBB uses 128-bit one-way encryption for its passwords.

ixfd64.png

 

ARENAscape:

 

Baratus [AS] max hit: 166 with Moon Battle Hammer

ixfd64 [AS] max hit: 116 with (untitled spell #2)

When the database got leaked, was it decrypted for some reason?

 

 

 

I thought that phpBB uses 128-bit one-way encryption for its passwords.

 

 

 

ixfd64

 

Read our latest news on our main site, you would know the database wasn't touch but we did have a breach on server. In other words they didn't get the password and usernames that way. I really can not go into details, until Silverion and Jagex done what they need to do to catch this *bleep*.

 

 

 

I know you smart like a few others around here and wondering have an earth they got them without not gettting them from the database, but beilive me, the database was not touch at all.

r we the only ones on here?

 

 

 

Fighterking2

 

 

 

If you forgotton your agreement number don't worry. Alto of users forget it.

 

 

 

You need to provide details, like when you started p2p.

 

When did you actually start playing rs on that character.

 

Any personal information you gave them would help when you signed up for members, ie, the name and address you used.

 

 

 

Give them any old passwords you may of used as well , even if you can't remeber them fully a part password may help.

 

 

 

If you have changed isp a while ago, tell them which isp you was with and roughly when you changed to new isp.

 

 

 

Tell them the last day you played and roughly the time you log out and where.

 

 

 

If you have other accounts, this may help. ( im not sure on this one though) but if you do have other accounts, tell them and when you started to play them etc.

 

 

 

Secret questions, if you know them, tell them to them. maybe pin number as well.

 

 

 

If you used worldpay i think theres a telephone number on this topic somewhere or http://forum.tip.it/viewtopic.php?t=458750, that might help you.

 

edit: i cant find that phone number someone posted! if someone see it, please repost it in big numbers. Thanks

Well I was smart enough not to use my RS password in the Tip.It forums. However, I realized I did use my email password without thinking about it.

 

 

 

Both passwords have now been changed and nothing seems to have been touched, but I'd caution anyone else to make sure they change their password for any other site/system that had the same one as their Tip.It password. Especially the email account you used when registering for the forums.

r we the only ones on here?

 

 

 

Fighterking2

 

 

 

If you forgotton your agreement number don't worry. Alto of users forget it.

 

 

 

You need to provide details, like when you started p2p.

 

When did you actually start playing rs on that character.

 

Any personal information you gave them would help when you signed up for members, ie, the name and address you used.

 

 

 

Give them any old passwords you may of used as well , even if you can't remeber them fully a part password may help.

 

 

 

If you have changed isp a while ago, tell them which isp you was with and roughly when you changed to new isp.

 

 

 

Tell them the last day you played and roughly the time you log out and where.

 

 

 

If you have other accounts, this may help. ( im not sure on this one though) but if you do have other accounts, tell them and when you started to play them etc.

 

 

 

Secret questions, if you know them, tell them to them. maybe pin number as well.

 

 

 

If you used worldpay i think theres a telephone number on this topic somewhere or http://forum.tip.it/viewtopic.php?t=458750, that might help you.

 

edit: i cant find that phone number someone posted! if someone see it, please repost it in big numbers. Thanks

 

 

 

OMG lighting thank you so much!!

 

 

 

I love you!!!!! :)

Ok i'm working on 48 hours pending on my 10th recovery request. Anyone else had this take so long. I gave them all sorts of info obout what was in my bank what my last two credit cards i used was and still haven't got it back yet.

w00t!!!!1

 

after 3 recovery requests i'm finally back in the game!!

 

ty Jagex ^^

oh my goodness. a friend just asked me if they limit you to ten requests. Does anyone know. Seriously i've written down each number to activate and this is my tenth adn i have been pending for right at 48 hours. I don't care if my stuff is gone I just want my time back I had over 140 quest points too.

r we the only ones on here?

 

 

 

Fighterking2

 

 

 

If you forgotton your agreement number don't worry. Alto of users forget it.

 

 

 

You need to provide details, like when you started p2p.

 

When did you actually start playing rs on that character.

 

Any personal information you gave them would help when you signed up for members, ie, the name and address you used.

 

 

 

Give them any old passwords you may of used as well , even if you can't remeber them fully a part password may help.

 

 

 

If you have changed isp a while ago, tell them which isp you was with and roughly when you changed to new isp.

 

 

 

Tell them the last day you played and roughly the time you log out and where.

 

 

 

If you have other accounts, this may help. ( im not sure on this one though) but if you do have other accounts, tell them and when you started to play them etc.

 

 

 

Secret questions, if you know them, tell them to them. maybe pin number as well.

 

 

 

If you used worldpay i think theres a telephone number on this topic somewhere or http://forum.tip.it/viewtopic.php?t=458750, that might help you.

 

edit: i cant find that phone number someone posted! if someone see it, please repost it in big numbers. Thanks

 

 

 

thank u, i will try that.

 

one more question, i found my transaction ID, but not all of the letters will fit in what the jagex's box provided.

Yea, I got my account locked for a while. I changed my password, though, and Jagex actually gave it back to me pretty quickly.

 

 

 

Another thing I suggest giving to them is you BANK PIN when it asks for more details.

 

 

 

I couldn't remember my agreement number and only vaguely when I started, but I did know my bank pin.

Ive given them my agreement # ,my bank pin, last log in date, a few of the items in my bank, the amount of money i had, armour i had on, armour in my bank, clothing in my bank, number of lobbys in my bank weapon i was using and had in my bank, but have they unlocked it? No, of course not, im begging to think they have something against me... :x

i use the same forum name as rs name, but because of boarding school im inactive on both :)

 

 

 

and i just checked my account and it hasnt been locked, and i have a diff pword here and on rs so im fine anyway

At least someone has some general knowledge around here...

 

 

Seriously. It is impossible for any forum to be 100% secure. Quit whining people and try to be more constructive.

phpBB doesn't actually store your password in the database anyway. It uses an MD5 hash for this information. For those who don't know, MD5 is a non-reversible hashing algorithm. When you log in, the forum software hashes the password you just typed in and compares that to see if it the same as the hash in the database. If it is, you get in.

 

 

 

To repeat, your password is never stored in the database, and you cannot reconstruct a password from an MD5 hash.

 

 

 

I have an idea how this happened (I'm a professional software engineer by trade) but I'm not going to speculate here. I can, however, say in certainty that the database wasn't stolen.

  • 2 weeks later...

oh well, thanks to this issue, i completely lost my low level range pure. kinda wierd that i decided to use that account name for the forums, but i used the same password on runescape as the forum. and i didnt bother to set recovery questions or a bank pin, so jagex wont unlock the account

shoelacesareuntiedti8.jpg

 

Proud owner of a Quest cape!

Be aware of keyloggers and things going around these days from random people. Even people you know may have them unknowingly or purposely. I have seen people creating them and they are able to get on peoples comps with a snap of their fingers. The only way to stop this is for Jagex to monitor accounts and transactions and drop trading and Ip addresses accounts are played on. Its just like the recent player killing of today. These players are doing this everyday and attaining a lot of rares. THe main way I see it happen is you are befriended then they send you something via some other source outside runescape. This is almost undetectable to Jagex. I suggest they watch more people and hire more moderators.

Create an account or sign in to comment

Important Information

By using this site, you agree to our Terms of Use.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.